oss-sec mailing list archives
Re: CVE request -- libvirt: unprivileged user can crash libvirtd during spice migration
From: cve-assign () mitre org
Date: Tue, 18 Mar 2014 10:17:15 -0400 (EDT)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Upstream fix: http://libvirt.org/git/?p=libvirt.git;a=commit;h=484cc321
Use CVE-2013-7336.
(this issue was reported to libvirt-security mailing list in the year 2k13 so might need 2k13 CVE)
http://libvirt.org/securityprocess.html says the libvirt-security mailing list is "while this email address is backed by a mailing list, it is invitation only." The date of a report to a private list does not directly affect the date portion of a CVE ID. However, there was an apparently public commit in 2013 that mentioned "the daemon crashed." - -- CVE assignment team, MITRE CVE Numbering Authority M/S M300 202 Burlington Road, Bedford, MA 01730 USA [ PGP key available through http://cve.mitre.org/cve/request_id.html ] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (SunOS) iQEcBAEBAgAGBQJTKFS/AAoJEKllVAevmvmsQo4H/izs/JxyMWwWqc4s5IDV5vXt mTgCBHrzOxHqo9X1VsaKYCsFwjccS/LZcGuQOwkuLZzZwilfzxhzwbFHqQITigbG RrLeAdXFofCUrrzZsgpuh8xr/PKBr1f2mzJxPmjDIcfdaLzHcZBb57YCIxdCYqGY muohfA9G67STmVKY5jKfP9Obpe/pmINIrUWC10ATQdk7qJdDiITveCSX3LDqTyOl O3w1OlLjKc99nWFQN4b4I0CCSFIOA91A6EDwW9hrY3vDRIMsqdDf/RilFn/vaUkd Ih5D5wmpKWy1zXvmX/XF0FsqYrpCagNoA5iAZYjtntCaD/r1BAijlINGKcARo/s= =1aqs -----END PGP SIGNATURE-----
Current thread:
- CVE request -- libvirt: unprivileged user can crash libvirtd during spice migration Petr Matousek (Mar 18)
- Re: CVE request -- libvirt: unprivileged user can crash libvirtd during spice migration cve-assign (Mar 18)