CVE-2013-2218
Fixed in a distro release EPSS 8%
Double free vulnerability in the virConnectListAllInterfaces method in interface/interface_backend_netcf.c in libvirt 1.0.6 allows remote attackers to cause a denial of service (libvirtd crash) via a filtering flag that causes an interface to be skipped, as demonstrated by the "virsh iface-list --inactive" command.
Products: redhat libvirt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libvirt | 1.1.0-1 |
| Debian 13 | libvirt | 1.1.0-1 |
| Debian 14 | libvirt | 1.1.0-1 |
| openSUSE Tumbleweed | libvirt | 2.5.0-1.1 |