Re: CVE request: libvirt: integer overflow in VirDomainGetVcpus

[Josh Bressers <bressers () redhat com>]

Please use CVE-2011-2511.

Thanks.

-- 
    JB


----- Original Message -----
> It has been found that calling VirDomainGetVcpus with bogus parameters
> can lead to integer overflow and subsequent heap corruption. A remote
> attacker could use this flaw to crash libvirtd (DoS).
>
> Upstream patch:
> https://www.redhat.com/archives/libvir-list/2011-June/msg01278.html
>
> References:
> https://bugzilla.redhat.com/show_bug.cgi?id=717199
> https://www.redhat.com/archives/libvir-list/2011-June/msg01278.html
>
> Thanks,
> --
> Petr Matousek / Red Hat Security Response Team