CVE-2013-6458

Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in…

published January 24, 2014

CVSS
—
EPSS
1%
Percentile
47.6
In the wild
Unconfirmed
What it is

Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00593 · 47.6th percentile
Published
2014-01-24T18:00Z
EPSS history
Timeline
  • 24 JAN 18:00Z
    Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in…
    cvelistv5