Red Hat Security AdvisoryRHSA-2011:0479
libvirt security and bug fix update
Released 2011-05-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libvirt-0.8.1-27.el6_0.6, libvirt-client-0.8.1-27.el6_0.6, libvirt-python-0.8.1-27.el6_0.6
- Red Hat Enterprise Linux Desktop Optional (v. 6) libvirt-0.8.1-27.el6_0.6, libvirt-devel-0.8.1-27.el6_0.6
- Red Hat Enterprise Linux HPC Node (v. 6) libvirt-0.8.1-27.el6_0.6, libvirt-client-0.8.1-27.el6_0.6, libvirt-python-0.8.1-27.el6_0.6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libvirt-0.8.1-27.el6_0.6, libvirt-devel-0.8.1-27.el6_0.6
- Red Hat Enterprise Linux Server (v. 6) libvirt-0.8.1-27.el6_0.6, libvirt-client-0.8.1-27.el6_0.6, libvirt-client-0.8.1-27.el6_0.6.ppc +3
- Red Hat Enterprise Linux Workstation (v. 6) libvirt-0.8.1-27.el6_0.6, libvirt-client-0.8.1-27.el6_0.6, libvirt-devel-0.8.1-27.el6_0.6 +1
Fixes 1 record
Priority LOW 18
libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service (crash) by causing multiple threads to report errors at the same time.
CVSS 2.0LOW 3.3· Adjacent network · No auth · Interaction — · EPSS 0.01199 · Published 2011-05-31 · Partial fix CWE-399
