libvirt 'VirDomainGetVcpus()' Function Remote Integer Overflow Heap Corruption Vulnerability
BID:48478
Info
libvirt 'VirDomainGetVcpus()' Function Remote Integer Overflow Heap Corruption Vulnerability
| Bugtraq ID: | 48478 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2011-2511 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 24 2011 12:00AM |
| Updated: | Apr 13 2015 09:29PM |
| Credit: | Eric Blake |
| Vulnerable: |
Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Virtualization 5 Server Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop Multi OS 5 client Redhat Enterprise Linux Desktop 6 libvirt libvirt 0.9.2 libvirt libvirt 0 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Avaya Aura System Platform 6.0.2 Avaya Aura System Platform 6.0.1 Avaya Aura System Platform 6.0 SP3 Avaya Aura System Platform 6.0 SP2 Avaya Aura System Platform 6.0 Avaya Aura System Platform 1.0 |
| Not Vulnerable: |
libvirt libvirt 0.9.3 |
Discussion
libvirt 'VirDomainGetVcpus()' Function Remote Integer Overflow Heap Corruption Vulnerability
libvirt is prone to a remote heap-based memory-corruption vulnerability because of an integer-overflow error.
Successfully exploiting this issue allows remote attackers to crash the 'libvirtd' daemon in the application that uses the affected library, denying service to legitimate users. Due to the nature of this issue, code execution may be possible; however, this has not been confirmed.
libvirt is prone to a remote heap-based memory-corruption vulnerability because of an integer-overflow error.
Successfully exploiting this issue allows remote attackers to crash the 'libvirtd' daemon in the application that uses the affected library, denying service to legitimate users. Due to the nature of this issue, code execution may be possible; however, this has not been confirmed.
Exploit / POC
libvirt 'VirDomainGetVcpus()' Function Remote Integer Overflow Heap Corruption Vulnerability
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
libvirt 'VirDomainGetVcpus()' Function Remote Integer Overflow Heap Corruption Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
libvirt 'VirDomainGetVcpus()' Function Remote Integer Overflow Heap Corruption Vulnerability
References:
References: