Read the docs
TI-2013-01893 Aliases CVE-2013-2124GHSA-565j-mpfh-22p5

Double free vulnerability in inspect-fs.c in LibguestFS 1.20.x before 1.20.7, 1.21.x…

Priority LOW 25Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Double free vulnerability in inspect-fs.c in LibguestFS 1.20.x before 1.20.7, 1.21.x, 1.22.0, and 1.23.0 allows remote attackers to cause a denial of service (crash) via empty guest files.

Why it matters now

EPSS 0.02602 85th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 49

CPEVersionsRoleVendor
cpe:2.3:a:libguestfs:libguestfs:1.20.0:*:*:*:*:*:*:*1.20.0VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.20.1:*:*:*:*:*:*:*1.20.1VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.20.2:*:*:*:*:*:*:*1.20.2VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.20.3:*:*:*:*:*:*:*1.20.3VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.20.4:*:*:*:*:*:*:*1.20.4VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.20.5:*:*:*:*:*:*:*1.20.5VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.20.6:*:*:*:*:*:*:*1.20.6VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.1:*:*:*:*:*:*:*1.21.1VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.2:*:*:*:*:*:*:*1.21.2VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.3:*:*:*:*:*:*:*1.21.3VulnerableLibguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.20.0:*:*:*:*:*:*:* Versions 1.20.0 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.20.1:*:*:*:*:*:*:* Versions 1.20.1 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.20.2:*:*:*:*:*:*:* Versions 1.20.2 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.20.3:*:*:*:*:*:*:* Versions 1.20.3 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.20.4:*:*:*:*:*:*:* Versions 1.20.4 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.20.5:*:*:*:*:*:*:* Versions 1.20.5 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.20.6:*:*:*:*:*:*:* Versions 1.20.6 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.1:*:*:*:*:*:*:* Versions 1.21.1 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.2:*:*:*:*:*:*:* Versions 1.21.2 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.3:*:*:*:*:*:*:* Versions 1.21.3 Vulnerable ·Libguestfs
Show 39 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:libguestfs:libguestfs:1.21.4:*:*:*:*:*:*:*1.21.4VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.5:*:*:*:*:*:*:*1.21.5VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.6:*:*:*:*:*:*:*1.21.6VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.7:*:*:*:*:*:*:*1.21.7VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.8:*:*:*:*:*:*:*1.21.8VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.9:*:*:*:*:*:*:*1.21.9VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.10:*:*:*:*:*:*:*1.21.10VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.11:*:*:*:*:*:*:*1.21.11VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.12:*:*:*:*:*:*:*1.21.12VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.13:*:*:*:*:*:*:*1.21.13VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.14:*:*:*:*:*:*:*1.21.14VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.15:*:*:*:*:*:*:*1.21.15VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.16:*:*:*:*:*:*:*1.21.16VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.17:*:*:*:*:*:*:*1.21.17VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.18:*:*:*:*:*:*:*1.21.18VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.19:*:*:*:*:*:*:*1.21.19VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.20:*:*:*:*:*:*:*1.21.20VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.21:*:*:*:*:*:*:*1.21.21VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.22:*:*:*:*:*:*:*1.21.22VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.23:*:*:*:*:*:*:*1.21.23VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.24:*:*:*:*:*:*:*1.21.24VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.25:*:*:*:*:*:*:*1.21.25VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.26:*:*:*:*:*:*:*1.21.26VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.27:*:*:*:*:*:*:*1.21.27VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.28:*:*:*:*:*:*:*1.21.28VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.29:*:*:*:*:*:*:*1.21.29VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.30:*:*:*:*:*:*:*1.21.30VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.31:*:*:*:*:*:*:*1.21.31VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.32:*:*:*:*:*:*:*1.21.32VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.33:*:*:*:*:*:*:*1.21.33VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.34:*:*:*:*:*:*:*1.21.34VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.35:*:*:*:*:*:*:*1.21.35VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.36:*:*:*:*:*:*:*1.21.36VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.37:*:*:*:*:*:*:*1.21.37VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.38:*:*:*:*:*:*:*1.21.38VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.39:*:*:*:*:*:*:*1.21.39VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.21.40:*:*:*:*:*:*:*1.21.40VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.22.0:*:*:*:*:*:*:*1.22.0VulnerableLibguestfs
cpe:2.3:a:libguestfs:libguestfs:1.23.0:*:*:*:*:*:*:*1.23.0VulnerableLibguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.4:*:*:*:*:*:*:* Versions 1.21.4 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.5:*:*:*:*:*:*:* Versions 1.21.5 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.6:*:*:*:*:*:*:* Versions 1.21.6 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.7:*:*:*:*:*:*:* Versions 1.21.7 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.8:*:*:*:*:*:*:* Versions 1.21.8 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.9:*:*:*:*:*:*:* Versions 1.21.9 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.10:*:*:*:*:*:*:* Versions 1.21.10 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.11:*:*:*:*:*:*:* Versions 1.21.11 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.12:*:*:*:*:*:*:* Versions 1.21.12 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.13:*:*:*:*:*:*:* Versions 1.21.13 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.14:*:*:*:*:*:*:* Versions 1.21.14 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.15:*:*:*:*:*:*:* Versions 1.21.15 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.16:*:*:*:*:*:*:* Versions 1.21.16 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.17:*:*:*:*:*:*:* Versions 1.21.17 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.18:*:*:*:*:*:*:* Versions 1.21.18 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.19:*:*:*:*:*:*:* Versions 1.21.19 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.20:*:*:*:*:*:*:* Versions 1.21.20 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.21:*:*:*:*:*:*:* Versions 1.21.21 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.22:*:*:*:*:*:*:* Versions 1.21.22 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.23:*:*:*:*:*:*:* Versions 1.21.23 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.24:*:*:*:*:*:*:* Versions 1.21.24 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.25:*:*:*:*:*:*:* Versions 1.21.25 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.26:*:*:*:*:*:*:* Versions 1.21.26 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.27:*:*:*:*:*:*:* Versions 1.21.27 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.28:*:*:*:*:*:*:* Versions 1.21.28 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.29:*:*:*:*:*:*:* Versions 1.21.29 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.30:*:*:*:*:*:*:* Versions 1.21.30 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.31:*:*:*:*:*:*:* Versions 1.21.31 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.32:*:*:*:*:*:*:* Versions 1.21.32 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.33:*:*:*:*:*:*:* Versions 1.21.33 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.34:*:*:*:*:*:*:* Versions 1.21.34 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.35:*:*:*:*:*:*:* Versions 1.21.35 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.36:*:*:*:*:*:*:* Versions 1.21.36 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.37:*:*:*:*:*:*:* Versions 1.21.37 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.38:*:*:*:*:*:*:* Versions 1.21.38 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.39:*:*:*:*:*:*:* Versions 1.21.39 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.21.40:*:*:*:*:*:*:* Versions 1.21.40 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.22.0:*:*:*:*:*:*:* Versions 1.22.0 Vulnerable ·Libguestfs
  • cpe:2.3:a:libguestfs:libguestfs:1.23.0:*:*:*:*:*:*:* Versions 1.23.0 Vulnerable ·Libguestfs

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat Enterprise Linux 6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-2124
  2. 2026-10-03 Alias added: GHSA-565j-mpfh-22p5

References

Exploit 1

Patch 3

Other 1

  • TI-2022-02041 Buffer overflow in libguestfs CVSS 3.1MEDIUM 6.5
  • TI-2013-03872 The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote… CVSS 2.0MEDIUM 6.8
  • TI-2010-03658 libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and… CVSS 2.0MEDIUM 4.7
  • TI-2012-02326 virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original… CVSS 2.0LOW 2.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences