CVE request: libvirt: integer overflow in VirDomainGetVcpus

[Petr Matousek <pmatouse () redhat com>]

It has been found that calling VirDomainGetVcpus with bogus parameters
can lead to integer overflow and subsequent heap corruption. A remote
attacker could use this flaw to crash libvirtd (DoS).

Upstream patch:
https://www.redhat.com/archives/libvir-list/2011-June/msg01278.html

References:
https://bugzilla.redhat.com/show_bug.cgi?id=717199
https://www.redhat.com/archives/libvir-list/2011-June/msg01278.html

Thanks,
-- 
Petr Matousek / Red Hat Security Response Team