CVE-2011-1146
Fixed in a distro release EPSS 2%
libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service (host OS crash) or possibly execute arbitrary code via a (1) virNodeDeviceDettach, (2) virNodeDeviceReset, (3) virDomainRevertToSnapshot, (4) virDomainSnapshotDelete, (5) virNodeDeviceReAttach, or (6) virConnectDomainXMLToNative call, a different vulnerability than CVE-2008-5086.
Products: redhat libvirt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libvirt | 0.8.8-3 |
| Debian 13 | libvirt | 0.8.8-3 |
| Debian 14 | libvirt | 0.8.8-3 |
| Debian 6.0 | libvirt | 0.8.3-5+squeeze1 |
| Red Hat Enterprise Linux 6 | libvirt | 0:0.8.1-27.el6_0.5 |
| Red Hat Enterprise Linux 6 | libvirt-client | 0:0.8.1-27.el6_0.5 |
| Red Hat Enterprise Linux 6 | libvirt-debuginfo | 0:0.8.1-27.el6_0.5 |
| Red Hat Enterprise Linux 6 | libvirt-devel | 0:0.8.1-27.el6_0.5 |
| Red Hat Enterprise Linux 6 | libvirt-python | 0:0.8.1-27.el6_0.5 |
| Red Hat rhel virtualization 5 | libvirt | 0:0.8.2-15.el5_6.3 |
| Red Hat rhel virtualization 5 | libvirt-debuginfo | 0:0.8.2-15.el5_6.3 |
| Red Hat rhel virtualization 5 | libvirt-devel | 0:0.8.2-15.el5_6.3 |
| Red Hat rhel virtualization 5 | libvirt-python | 0:0.8.2-15.el5_6.3 |
| openSUSE Tumbleweed | libvirt | 2.5.0-1.1 |