NVD

Id
36537  
Name
CVE-2013-0170  
Description
Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6 before 0.9.6.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering certain errors during an RPC connection, which causes a message to be freed without being removed from the message queue.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-02-08  
Modified Date
2015-01-14  
Seq
2013-0170  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
186630 36537 CVE-2013-0170 http://libvirt.org/git/?p=libvirt.git;a=commit;h=46532e3e8ed5f5a736a02f67d6c805492f9ca720  View
186631 36537 CVE-2013-0170 http://libvirt.org/news.html  View
186632 36537 CVE-2013-0170 FEDORA-2013-1644  View
186633 36537 CVE-2013-0170 FEDORA-2013-1642  View
186634 36537 CVE-2013-0170 FEDORA-2013-1626  View
186635 36537 CVE-2013-0170 openSUSE-SU-2013:0274  View
186636 36537 CVE-2013-0170 openSUSE-SU-2013:0275  View
186637 36537 CVE-2013-0170 SUSE-SU-2013:0320  View
186638 36537 CVE-2013-0170 RHSA-2013:0199  View
186639 36537 CVE-2013-0170 http://wiki.libvirt.org/page/Maintenance_Releases  View
186640 36537 CVE-2013-0170 57578  View
186641 36537 CVE-2013-0170 1028047  View
186642 36537 CVE-2013-0170 USN-1708-1  View
186643 36537 CVE-2013-0170 libvirt-virnetmessagefree-code-exec(81552)  View
186644 36537 CVE-2013-0170 https://bugzilla.redhat.com/show_bug.cgi?id=893450  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19877 JVNDB-2013-001452 libvirt におけるサービス運用妨害 (クラッシュ) の脆弱性 libvirt の rpc/virnetserverclient.c 内の virNetMessageFree 関数には、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (クラッシュ) 状態となる、および任意のコードを実行される脆弱性が存在します。 CVE-2013-0170 60112 CVE-2013-0170 36537 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001452.html 2013-01-28 2013-11-01 View