| Reported on: | 20120913 |
|---|---|
| Published on: | 20120724 |
| Fixed on: | 20120914 |
| Reported by: | Wenlong Huang |
|---|---|
| Patched by: | Martin Kletzander |
Sending RPC message with an event number as the RPC procedure number could lead to the daemon accessing a NULL pointer in the RPC dispatch table.
A malicious client could cause the libvirtd daemon to crash resulting in a denial of service attack.
Update the UNIX socket permissions to prevent a malicious user from connecting to libvirtd.