CVEvulnerability

CVE-2013-6458

6.8 MEDIUM Published 2014-01-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-01-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:A/AC:H/Au:N/C:C/I:C/A:C
Weaknesses
CWE-362

Description

Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.

Affected configurations

• redhat libvirt (<= 1.2.0) • redhat libvirt 0.0.1 • redhat libvirt 0.0.2 • redhat libvirt 0.0.3 • redhat libvirt 0.0.4 • redhat libvirt 0.0.5 • redhat libvirt 0.0.6 • redhat libvirt 0.1.0 • redhat libvirt 0.1.1 • redhat libvirt 0.1.3 • redhat libvirt 0.1.4 • redhat libvirt 0.1.5 • redhat libvirt 0.1.6 • redhat libvirt 0.1.7 • redhat libvirt 0.1.8 • redhat libvirt 0.1.9 • redhat libvirt 0.2.0 • redhat libvirt 0.2.1 • redhat libvirt 0.2.2 • redhat libvirt 0.2.3 • redhat libvirt 0.3.0 • redhat libvirt 0.3.1 • redhat libvirt 0.3.2 • redhat libvirt 0.3.3 • redhat libvirt 0.4.0 • redhat libvirt 0.4.1 • redhat libvirt 0.4.2 • redhat libvirt 0.4.3 • redhat libvirt 0.4.4 • redhat libvirt 0.4.5 • redhat libvirt 0.4.6 • redhat libvirt 0.5.0 • redhat libvirt 0.5.1 • redhat libvirt 0.6.0 • redhat libvirt 0.6.1 • redhat libvirt 0.6.2 • redhat libvirt 0.6.3 • redhat libvirt 0.6.4 • redhat libvirt 0.6.5 • redhat libvirt 0.7.0 • redhat libvirt 0.7.1 • redhat libvirt 0.7.2 • redhat libvirt 0.7.3 • redhat libvirt 0.7.4 • redhat libvirt 0.7.5 • redhat libvirt 0.7.6 • redhat libvirt 0.7.7 • redhat libvirt 0.8.0 • redhat libvirt 0.8.1 • redhat libvirt 0.8.2 • redhat libvirt 0.8.3 • redhat libvirt 0.8.4 • redhat libvirt 0.8.5 • redhat libvirt 0.8.6 • redhat libvirt 0.8.7 • redhat libvirt 0.8.8 • redhat libvirt 0.9.0 • redhat libvirt 0.9.1 • redhat libvirt 0.9.2 • redhat libvirt 0.9.3 … and 50 more

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References