CVE-2013-6458 in libvirt信息

摘要

由 MITRE

Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2013-11-04

披露

2014-01-24

管理

已接受

条目

VDB-11780

CPE

准备好

CWE

CWE-362 (已确认)

CVSS

6.8 (NVD)

EPSS

0.00588

KEV

否

活动

非常低

部门

Government, Chemical, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2013-6458
NVD	https://nvd.nist.gov/vuln/detail/CVE-2013-6458
CVE Details	https://www.cvedetails.com/cve/CVE-2013-6458/

◂ 上一步一览下一步 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!