oss-sec mailing list archives
CVE-2013-2218 -- libvirt: crash when listing network interfaces with filters
From: Petr Matousek <pmatouse () redhat com>
Date: Mon, 1 Jul 2013 17:21:59 +0200
The virConnectListAllInterfaces method has a double-free of the 'struct netcf_if' object when any of the filtering flags cause an interface to be skipped over. For example when running the command 'virsh iface-list --inactive' Upstream fix: http://libvirt.org/git/?p=libvirt.git;a=commit;h=244e0b8cf15ca2ef48d82058e728656e6c4bad11 References: https://bugzilla.redhat.com/show_bug.cgi?id=980112 Thanks, -- Petr Matousek / Red Hat Security Response Team
Current thread:
- CVE-2013-2218 -- libvirt: crash when listing network interfaces with filters Petr Matousek (Jul 01)
- Re: CVE-2013-2218 -- libvirt: crash when listing network interfaces with filters Kurt Seifried (Jul 01)