CVE-2012-3445 in libvirt
요약 (영어)
The virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain* API calls with typed parameters, which might allow remote authenticated users to cause a denial of service (libvirtd crash) via an RPC command with nparams set to zero, which triggers an out-of-bounds read or a free of an invalid pointer.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
예약하다
2012. 06. 14.
공개
2012. 08. 07.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 61513 | Red Hat libvirt virTypedParameterArrayClear 서비스 거부 | 399 | 정의되지 않음 | 정의되지 않음 | CVE-2012-3445 |