Libvirt Security Notice: LSN-2013-0016

Out of bounds access in bitmap array

Lifecycle

Credits

See also

• CVE-2013-5651

Description

When parsing bitmap strings the bounds of the array were not checked when determining if the bit was set. This in turn resulted in the parser later crashing

Impact

A malicious user can cause libvirtd to crash by feeding it data with malformed bitmap strings

Workaround

Prevent untrusted users from accessing the libvirtd daemon

Affected product: libvirt

Alternative formats: [xml] [text]