Libvirt Security Notice: LSN-2014-0001

libvirtd crashes if client closes connection early

Lifecycle

Credits

See also

• CVE-2014-1447

Description

When a client closes its connection to libvirtd early during virConnectOpen, more specifically just after making REMOTE_PROC_CONNECT_SUPPORTS_FEATURE call to check if VIR_DRV_FEATURE_PROGRAM_KEEPALIVE is supported without even waiting for the result, libvirtd may crash due to a race in keep-alive initialization.

Impact

A malicious unprivileged client can cause the libvirtd daemon to crash leading to a denial of service

Workaround

Disable keepalive feature in the libvirtd.conf configuration file

Affected product: libvirt

Alternative formats: [xml] [text]