CVE-2012-4423
Fixed in a distro release EPSS 4%
The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and segmentation fault) via an RPC call with (1) an event as the RPC number or (2) an RPC number whose value is in a "gap" in the RPC dispatch table.
Products: redhat libvirt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libvirt | 0.9.12-5 |
| Debian 13 | libvirt | 0.9.12-5 |
| Debian 14 | libvirt | 0.9.12-5 |
| Red Hat Enterprise Linux 6 | libvirt | 0:0.9.10-21.el6_3.5 |
| Red Hat Enterprise Linux 6 | libvirt-client | 0:0.9.10-21.el6_3.5 |
| Red Hat Enterprise Linux 6 | libvirt-debuginfo | 0:0.9.10-21.el6_3.5 |
| Red Hat Enterprise Linux 6 | libvirt-devel | 0:0.9.10-21.el6_3.5 |
| Red Hat Enterprise Linux 6 | libvirt-lock-sanlock | 0:0.9.10-21.el6_3.5 |
| Red Hat Enterprise Linux 6 | libvirt-python | 0:0.9.10-21.el6_3.5 |