QwikSec

Security Database

CVE

CWE

Training

CVE-2014-3633

Published: Oct 6, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged or removed from the live image, allows remote attackers to cause a denial of service (crash) or read sensitive heap information via a crafted blkiotune query, which triggers an out-of-bounds read.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_SECUNIA

vendor-advisory

x_refsource_GENTOO

http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=3e745e8f775dfe6f64f18b5c2fe4791b35d3546b

x_refsource_CONFIRM

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_DEBIAN

vendor-advisory

x_refsource_UBUNTU

openSUSE-SU-2014:1290

vendor-advisory

x_refsource_SUSE

third-party-advisory

x_refsource_SECUNIA

http://security.libvirt.org/2014/0004.html

x_refsource_CONFIRM

openSUSE-SU-2014:1293

vendor-advisory

x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.