Libvirt Security Notice: LSN-2013-0011
Invalid free when setting up NBD devices
Lifecycle
| Reported on: |
20130903 |
| Published on: |
20130903 |
| Fixed on: |
20130903 |
Credits
See also
Description
When setup of an NBD device for a container fails
the libvirtd daemon could end up free'ing an uninitialized
variable. If unlucky this would result in memory corruption
or a crash
Impact
A user with the permission to start LXC guests
could cause the libvirtd daemon to crash leading to a
denial of service
Workaround
Do not configure LXC guests with the NBD backed disks
or remove the permission for untrusted users to start LXC guests
Affected product: libvirt
Alternative formats:
[xml] [text]