CVE-2013-4292

Published: 30 September 2013

libvirt 1.1.0 and 1.1.1 allows local users to cause a denial of service (memory consumption) via a large number of domain migrate parameters in certain RPC calls in (1) daemon/remote.c and (2) remote/remote_driver.c.

Notes

introduced in 1.1.0

Status

References

• http://www.mail-archive.com/libvir-list@redhat.com/msg83332.html
• https://www.cve.org/CVERecord?id=CVE-2013-4292
• NVD
• Launchpad
• Debian

Bugs

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721325