CVE-2013-1962
Fixed in a distro release EPSS 4%
The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of requests "to list all volumes for the particular pool."
Products: redhat libvirt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 6 | libvirt | 0:0.10.2-18.el6_4.5 |
| Red Hat Enterprise Linux 6 | libvirt-client | 0:0.10.2-18.el6_4.5 |
| Red Hat Enterprise Linux 6 | libvirt-debuginfo | 0:0.10.2-18.el6_4.5 |
| Red Hat Enterprise Linux 6 | libvirt-devel | 0:0.10.2-18.el6_4.5 |
| Red Hat Enterprise Linux 6 | libvirt-lock-sanlock | 0:0.10.2-18.el6_4.5 |
| Red Hat Enterprise Linux 6 | libvirt-python | 0:0.10.2-18.el6_4.5 |
| openSUSE Tumbleweed | libvirt | 2.5.0-1.1 |