| Reported on: | 20140109 |
|---|---|
| Published on: | 20131231 |
| Fixed on: | 20140113 |
| Reported by: | Jiri Denemark |
|---|---|
| Patched by: | Jiri Denemark |
When a client closes its connection to libvirtd early during virConnectOpen, more specifically just after making REMOTE_PROC_CONNECT_SUPPORTS_FEATURE call to check if VIR_DRV_FEATURE_PROGRAM_KEEPALIVE is supported without even waiting for the result, libvirtd may crash due to a race in keep-alive initialization.
A malicious unprivileged client can cause the libvirtd daemon to crash leading to a denial of service
Disable keepalive feature in the libvirtd.conf configuration file