Red Hat Security AdvisoryRHSA-2014:1352
libvirt security and bug fix update
Released 2014-10-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libvirt-1.1.1-29.el7_0.3, libvirt-client-1.1.1-29.el7_0.3, libvirt-daemon-1.1.1-29.el7_0.3 +12
- Red Hat Enterprise Linux Client Optional (v. 7) libvirt-daemon-lxc-1.1.1-29.el7_0.3, libvirt-devel-1.1.1-29.el7_0.3, libvirt-docs-1.1.1-29.el7_0.3 +2
- Red Hat Enterprise Linux ComputeNode (v. 7) libvirt-1.1.1-29.el7_0.3, libvirt-client-1.1.1-29.el7_0.3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libvirt-1.1.1-29.el7_0.3, libvirt-daemon-1.1.1-29.el7_0.3, libvirt-daemon-config-network-1.1.1-29.el7_0.3 +16
- Red Hat Enterprise Linux Server (v. 7) libvirt-1.1.1-29.el7_0.3, libvirt-client-1.1.1-29.el7_0.3, libvirt-client-1.1.1-29.el7_0.3.ppc +16
- Red Hat Enterprise Linux Server Optional (v. 7) libvirt-daemon-lxc-1.1.1-29.el7_0.3, libvirt-lock-sanlock-1.1.1-29.el7_0.3, libvirt-login-shell-1.1.1-29.el7_0.3
- Red Hat Enterprise Linux Workstation (v. 7) libvirt-1.1.1-29.el7_0.3, libvirt-client-1.1.1-29.el7_0.3, libvirt-daemon-1.1.1-29.el7_0.3 +14
- Red Hat Enterprise Linux Workstation Optional (v. 7) libvirt-daemon-lxc-1.1.1-29.el7_0.3, libvirt-lock-sanlock-1.1.1-29.el7_0.3, libvirt-login-shell-1.1.1-29.el7_0.3
Fixes 2 records
Priority LOW 31
The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged or removed from the live image, allows remote attackers to cause a denial of service (crash) or read s…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.02751 · Published 2014-10-06 · Partial fix CWE-119
Priority LOW 28
The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial of service (deadlock) via a NULL value i…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02791 · Published 2014-10-06 · Partial fix CWE-399
