NVD

Id
8117  
Name
CVE-2011-1146  
Description
libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service (host OS crash) or possibly execute arbitrary code via a (1) virNodeDeviceDettach, (2) virNodeDeviceReset, (3) virDomainRevertToSnapshot, (4) virDomainSnapshotDelete, (5) virNodeDeviceReAttach, or (6) virConnectDomainXMLToNative call, a different vulnerability than CVE-2008-5086.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-03-15  
Modified Date
2011-09-06  
Seq
2011-1146  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
46449 8117 CVE-2011-1146 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=617773  View
46450 8117 CVE-2011-1146 http://libvirt.org/git/?p=libvirt.git;a=commit;h=71753cb7f7a16ff800381c0b5ee4e99eea92fed3  View
46451 8117 CVE-2011-1146 FEDORA-2011-3286  View
46452 8117 CVE-2011-1146 openSUSE-SU-2011:0311  View
46453 8117 CVE-2011-1146 [oss-security] 20110309 CVE request: libvirt: several API calls do not honour read-only connection  View
46454 8117 CVE-2011-1146 [oss-security] 20110310 Re: CVE request: libvirt: several API calls do not honour read-only connection  View
46455 8117 CVE-2011-1146 DSA-2194  View
46456 8117 CVE-2011-1146 RHSA-2011:0391  View
46457 8117 CVE-2011-1146 46820  View
46458 8117 CVE-2011-1146 1025262  View
46459 8117 CVE-2011-1146 USN-1094-1  View
46460 8117 CVE-2011-1146 ADV-2011-0694  View
46461 8117 CVE-2011-1146 ADV-2011-0700  View
46462 8117 CVE-2011-1146 ADV-2011-0794  View
46463 8117 CVE-2011-1146 ADV-2011-0805  View
46464 8117 CVE-2011-1146 libvirt-apicalls-dos(66012)  View
46465 8117 CVE-2011-1146 https://bugzilla.novell.com/show_bug.cgi?id=678406  View
46466 8117 CVE-2011-1146 https://bugzilla.redhat.com/show_bug.cgi?id=683650  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31196 JVNDB-2011-001436 複数のレッドハット製品などで利用される libvirt の libvirt.c における任意のコードを実行される脆弱性 複数のレッドハット製品などで利用される libvirt の API 内にある libvirt.c は、read-only 接続を適切に制限しないため、サービス運用妨害 (ホスト OS クラッシュ) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2011-1146 49053 CVE-2011-1146 8117 6.9 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001436.html 2011-02-17 2011-04-27 View