| Reported on: | 20130829 |
|---|---|
| Published on: | 20130829 |
| Fixed on: | 20130829 |
| Reported by: | Daniel Berrange |
|---|---|
| Patched by: | Daniel Berrange |
The virDomainMigrate*Params RPC calls did not check how many parameters were supplied by the user.
A malicious user with the ability to start migration can cause libvirtd to allocate arbitrary amounts of memory by specifying too many parameters.
Prevent untrusted users from using the migration APIs by setting a suitable access control policy