Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2014-01-24 18:55
Updated : 2015-01-03 02:19
NVD link : CVE-2013-6458
Mitre link : CVE-2013-6458
CVE.ORG link : CVE-2013-6458
JSON object : View
Products Affected
redhat
- libvirt
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')