libguestfs 'inspect-fs.c' Double Free Local Denial of Service Vulnerability
BID:60205
Info
libguestfs 'inspect-fs.c' Double Free Local Denial of Service Vulnerability
| Bugtraq ID: | 60205 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2013-2124 |
| Remote: | No |
| Local: | Yes |
| Published: | May 29 2013 12:00AM |
| Updated: | Apr 13 2015 09:22PM |
| Credit: | Richard W.M. Jones |
| Vulnerable: |
Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 libguestfs libguestfs 1.23 libguestfs libguestfs 1.22 libguestfs libguestfs 1.21.1 libguestfs libguestfs 1.20.6 libguestfs libguestfs 1.20.1 |
| Not Vulnerable: |
libguestfs libguestfs 1.23.1 libguestfs libguestfs 1.22.1 libguestfs libguestfs 1.20.11 |
Discussion
libguestfs 'inspect-fs.c' Double Free Local Denial of Service Vulnerability
libguestfs is prone to a local denial-of-service vulnerability due to a double-free condition.
A local attacker can exploit this issue to crash the affected application, denying service to legitimate users.
libguestfs is prone to a local denial-of-service vulnerability due to a double-free condition.
A local attacker can exploit this issue to crash the affected application, denying service to legitimate users.
Exploit / POC
libguestfs 'inspect-fs.c' Double Free Local Denial of Service Vulnerability
An attacker can exploit this issue through readily available tools.
An attacker can exploit this issue through readily available tools.
Solution / Fix
libguestfs 'inspect-fs.c' Double Free Local Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
libguestfs 'inspect-fs.c' Double Free Local Denial of Service Vulnerability
References:
References:
- libguestfs Homepage (libguestfs)
- Re: CVE Request -- libguestfs (1.20.6 | 1.22.0 | 1.23.0 <= X < 1.22.1 | 1.23.1): (Richard W.M. Jones)