NVD

Id
38087  
Name
CVE-2013-1962  
Description
The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of requests "to list all volumes for the particular pool."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-05-28  
Modified Date
2013-11-30  
Seq
2013-1962  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194684 38087 CVE-2013-1962 http://libvirt.org/git/?p=libvirt.git;a=commit;h=ca697e90d5bd6a6dfb94bfb6d4438bdf9a44b739  View
194685 38087 CVE-2013-1962 FEDORA-2013-8635  View
194686 38087 CVE-2013-1962 FEDORA-2013-8681  View
194687 38087 CVE-2013-1962 openSUSE-SU-2013:0885  View
194688 38087 CVE-2013-1962 RHSA-2013:0831  View
194689 38087 CVE-2013-1962 [oss-security] 20130516 CVE-2013-1962 libvirt: DoS (max count of open files exhaustion) due sockets leak in the storage pool  View
194690 38087 CVE-2013-1962 59937  View
194691 38087 CVE-2013-1962 1028577  View
194692 38087 CVE-2013-1962 USN-1895-1  View
194693 38087 CVE-2013-1962 libvirt-cve20131962-dos(84341)  View
194694 38087 CVE-2013-1962 https://bugzilla.redhat.com/show_bug.cgi?id=953107  View
194695 38087 CVE-2013-1962 [libvir-list] 20130516 [libvirt] [PATCH] daemon: fix leak after listing all volumes  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21266 JVNDB-2013-002841 libvirt のストレージプールマネージャにおけるサービス運用妨害 (DoS) の脆弱性 libvirt のストレージプールマネージャ (storage pool manager) の remoteDispatchStoragePoolListAllVolumes 関数には、サービス運用妨害 (ファイル記述子の消費) 状態にされる脆弱性が存在します。 CVE-2013-1962 61904 CVE-2013-1962 38087 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002841.html 2013-05-16 2013-12-06 View