Libvirt Security Notice: LSN-2012-0003

Crash of libvirt when dispatching illegal RPC procedure

Lifecycle

Credits

See also

• CVE-2012-4423

Description

Sending RPC message with an event number as the RPC procedure number could lead to the daemon accessing a NULL pointer in the RPC dispatch table.

Impact

A malicious client could cause the libvirtd daemon to crash resulting in a denial of service attack.

Workaround

Update the UNIX socket permissions to prevent a malicious user from connecting to libvirtd.

Affected product: libvirt

Alternative formats: [xml] [text]