CVE-2021-3975CWE-416

A use-after-free flaw was found in libvirt

published August 23, 2022

CVSS
—
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01642 · 76.2th percentile
Weakness
CWE-416 · Use After Free
Published
2022-08-23T00:00Z
EPSS history
Timeline
  • 23 AUG 00:00Z
    A use-after-free flaw was found in libvirt
    cvelistv5