DEBIAN-CVE-2014-8135

DEBIAN-CVE-2014-8135 PUBLISHED CVSS 6.900000095367432 MEDIUM

The storageVolUpload function in storage/storage_driver.c in libvirt before 1.2.11 does not check a certain return value, which allows local users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted offset value in a "virsh vol-upload" command.

Risk Scores

CVSS 4.0

6.900000095367432

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
Debian:14	libvirt	0, 0, 0
Debian:12	libvirt	0, 0, 0
Debian:11	libvirt	0, 0, 0
Debian:13	libvirt	0, 0, 0

Timeline

Dec 19, 2014 CVE Published
Aug 8, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2014-8135 advisory

Open in Interactive Console →