CVE-2014-3633
Fixed in a distro release EPSS 3%
The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged or removed from the live image, allows remote attackers to cause a denial of service (crash) or read sensitive heap information via a crafted blkiotune query, which triggers an out-of-bounds read.
Products: canonical ubuntu_linux, libvirt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libvirt | 1.2.8-2 |
| Debian 13 | libvirt | 1.2.8-2 |
| Debian 14 | libvirt | 1.2.8-2 |
| Debian 7 | libvirt | 0.9.12.3-1+deb7u1 |
| Red Hat Enterprise Linux 6 | libvirt | 0:0.10.2-46.el6_6.2 |
| Red Hat Enterprise Linux 6 | libvirt-client | 0:0.10.2-46.el6_6.2 |
| Red Hat Enterprise Linux 6 | libvirt-debuginfo | 0:0.10.2-46.el6_6.2 |
| Red Hat Enterprise Linux 6 | libvirt-devel | 0:0.10.2-46.el6_6.2 |
| Red Hat Enterprise Linux 6 | libvirt-lock-sanlock | 0:0.10.2-46.el6_6.2 |
| Red Hat Enterprise Linux 6 | libvirt-python | 0:0.10.2-46.el6_6.2 |
| Red Hat Enterprise Linux 7 | libvirt | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-client | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-daemon | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-config-network | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-config-nwfilter | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-interface | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-lxc | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-network | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-nodedev | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-nwfilter | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-qemu | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-secret | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-storage | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-kvm | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-lxc | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-debuginfo | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-devel | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-docs | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-lock-sanlock | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-login-shell | 0:1.1.1-29.el7_0.3 |
| Red Hat Enterprise Linux 7 | libvirt-python | 0:1.1.1-29.el7_0.3 |
| Ubuntu 14.04 LTS | libvirt | 1.2.2-0ubuntu13.1.5 |
| openSUSE Tumbleweed | libvirt | 2.5.0-1.1 |