Libvirt Security Notice: LSN-2013-0001

Fix crash on error paths of message dispatching

Lifecycle

Credits

See also

• CVE-2013-0170

Description

When reading and dispatching of a message failed the message was freed but was not removed from the message queue. When the connection was later closed this would result in an attempt to free uninitialized memory

Impact

A malicious user could send an RPC message which intentionally results in an error and thus cause libvirtd to crash

Workaround

Remove access to libvirtd from untrusted user accounts

Affected product: libvirt

Alternative formats: [xml] [text]