Libvirt Security Notice: LSN-2013-0010

Crash when querying domain memory stats

Lifecycle

Credits

See also

• CVE-2013-4296

Description

The code handling the virDomainMemoryStats API in the libvirtd daemon dispatch did not correctly initialize variables to NULL. Thus if RPC parameter validation failed it was possible for libvirtd to access uninitialized memory during cleanup.

Impact

A unprivileged user can cause libvirtd to access uninitialized memory by sending an intentionally invalid RPC request for domain memory stats. This could lead to heap corruption in some cases

Workaround

Prevent untrusted users from connecting to the libvirtd daemon or block access to the virDomainMemoryStats API with the access control framework.

Affected product: libvirt

Alternative formats: [xml] [text]