CVE-2009-0036
Fixed in a distro release EPSS 1%
Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sending the remainder of the packet with crafted values in the header, related to use of uninitialized memory in a validation check.
Products: libvirt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libvirt | 0.5.1-7 |
| Debian 13 | libvirt | 0.5.1-7 |
| Debian 14 | libvirt | 0.5.1-7 |
| Red Hat rhel virtualization 5 | libvirt | 0:0.3.3-14.el5_3.1 |
| Red Hat rhel virtualization 5 | libvirt-debuginfo | 0:0.3.3-14.el5_3.1 |
| Red Hat rhel virtualization 5 | libvirt-devel | 0:0.3.3-14.el5_3.1 |
| Red Hat rhel virtualization 5 | libvirt-python | 0:0.3.3-14.el5_3.1 |