<security-notice xmlns="http://security.libvirt.org/xmlns/security-notice/1.0">
  <id>2013-0013</id>

  <summary>Crash of libvirtd when ACLs are active and events registered</summary>

  <description>
<![CDATA[When a connection to libvirtd is closed any event handlers registered
must be removed. When ACLs were active no identity was set when removing the
event handlers, so the operation was denied. Thus event handlers remained
connected to a client that had been freed.]]>
  </description>

  <impact>
<![CDATA[An unprivileged user can cause a crash of the libvirtd daemon when
ACLs are active by registering one or more event handlers. This leads to a
denial of service.]]>
  </impact>

  <workaround>
<![CDATA[Remove access from unprivileged local users or block access to the
event APIs using ACLs]]>
  </workaround>

  <credits>
    <reporter>
      <name>Zhenfang Wang</name>
      <email>zhwang@redhat.com</email>
    </reporter>
    <patcher>
      <name>Daniel Berrange</name>
      <email>berrange@redhat.com</email>
    </patcher>
  </credits>

  <lifecycle>
    <reported>20131002</reported>
    <published>20130927</published>
    <fixed>20130927</fixed>
  </lifecycle>

  <reference>
    <advisory type="CVE" id="2013-4399"/>
  </reference>

  <product name="libvirt">
    <repository>libvirt.git</repository>
    <branch>
      <name>master</name>
      <tag state="vulnerable">v1.1.0</tag>
      <tag state="vulnerable">v1.1.1</tag>
      <tag state="vulnerable">v1.1.2</tag>
      <change state="vulnerable">ed3bac713c3cfc055ef551cbfe92a061084382c3</change>
      <tag state="fixed">v1.1.3</tag>
      <change state="fixed">8294aa0c1750dcb49d6345cd9bd97bf421580d8b</change>
    </branch>
    <branch>
      <name>v1.1.0-maint</name>
      <change state="vulnerable">ed3bac713c3cfc055ef551cbfe92a061084382c3</change>
      <change state="fixed">03288d0de6894e18c9be187e2ace0cc50f15ceaa</change>
    </branch>
    <branch>
      <name>v1.1.1-maint</name>
      <change state="vulnerable">ed3bac713c3cfc055ef551cbfe92a061084382c3</change>
      <change state="fixed">966025b1c6a6c0043c4d1c5f0c9ba218e3fe113b</change>
    </branch>
    <branch>
      <name>v1.1.2-maint</name>
      <change state="vulnerable">ed3bac713c3cfc055ef551cbfe92a061084382c3</change>
      <change state="fixed">841284a04895f3fc4c5ae9073e33a6130776efa7</change>
    </branch>
  </product>

</security-notice>
