Libvirt Security Notice Index > 2013

Libvirt Security Notice Index

2013

LSN-2013-0001 (CVE-2013-0170): Fix crash on error paths of message dispatching
LSN-2013-0002 (CVE-2013-1962): Leak of file descriptors when listing storage volumes
LSN-2013-0003 (CVE-2013-2218): Crash of libvirtd when listing host interfaces
LSN-2013-0004 (CVE-2013-2230): Crash in libvirtd registering events
LSN-2013-0005 (CVE-2013-4153): Crash after querying vCPU count from guest agent
LSN-2013-0006 (CVE-2013-4154): Crash of libvirtd without guest agent active
LSN-2013-0007 (CVE-2013-4239): Crash listing inactive domains in Xen driver
LSN-2013-0008 (CVE-2013-4291): Libvirt security driver does not clear supplementary groups
LSN-2013-0009 (CVE-2013-4292): Missing bounds checking on parameter count in migration API
LSN-2013-0010 (CVE-2013-4296): Crash when querying domain memory stats
LSN-2013-0011 (CVE-2013-4297): Invalid free when setting up NBD devices
LSN-2013-0012 (CVE-2013-4311): Insecure invocation of polkit for checking authorization
LSN-2013-0013 (CVE-2013-4399): Crash of libvirtd when ACLs are active and events registered
LSN-2013-0014 (CVE-2013-4400): virt-login-shell fails to secure setuid environment
LSN-2013-0015 (CVE-2013-4401): Incorrect permissions on XML conversion APIs
LSN-2013-0016 (CVE-2013-5651): Out of bounds access in bitmap array
LSN-2013-0017 (CVE-2013-6436): libvirtd daemon crash when reading memory tunables for LXC guest in shutoff status
LSN-2013-0018 (CVE-2013-6456): Unsafe usage of paths under /proc/$PID/root by the LXC driver
LSN-2013-0019 (CVE-2013-6457): libvirtd crash when reading numa tunables for libxl guest in shutoff status
LSN-2013-0020 (CVE-2013-6458): libvirtd crash when hot-plugging disks for qemu domains
LSN-2013-0021 (CVE-2013-7336): libvirtd crash during seamless SPICE migration

Home

Website (via DuckDuckGo) Wiki (via DuckDuckGo) Developers list Users list