Description
Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a connection before a keepalive response is sent.
Exploits (1)
References (12)
Core 12
Core References
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/56446
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2014/dsa-2846
Various Sources x_refsource_confirm
http://libvirt.org/news.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/60895
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201412-04.xml
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/56321
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-02/msg00060.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1029695
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0103.html
Vendor Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1047577
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-02/msg00062.html
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2093-1
Scores
EPSS
0.1168
EPSS Percentile
93.7%
Details
CWE
CWE-362
Status
published
Products (50)
redhat/libvirt
0.0.1
redhat/libvirt
0.0.2
redhat/libvirt
0.0.3
redhat/libvirt
0.0.4
redhat/libvirt
0.0.5
redhat/libvirt
0.0.6
redhat/libvirt
0.1.0
redhat/libvirt
0.1.1
redhat/libvirt
0.1.3
redhat/libvirt
0.1.4
... and 40 more
Published
Jan 24, 2014
Tracked Since
Feb 18, 2026