MGASA-2013-0166

Source
https://advisories.mageia.org/MGASA-2013-0166.html
Import Source
https://advisories.mageia.org/MGASA-2013-0166.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2013-0166
Upstream
  • CVE-2013-1962
Published
2013-06-06T12:24:33Z
Modified
2026-04-16T06:24:56Z
Summary
Updated libvirt packages fix security vulnerability
Details

It was found that libvirtd leaked file descriptors when listing all volumes for a particular pool. A remote attacker able to establish a read-only connection to libvirtd could use this flaw to cause libvirtd to consume all available file descriptors, preventing other users from using libvirtd services (such as starting a new guest) until libvirtd is restarted (CVE-2013-1962).

References
Credits

Affected packages

Mageia:3 / libvirt

Package

Name
libvirt
Purl
pkg:rpm/mageia/libvirt?arch=source&distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.0.2-8.1.mga3

Ecosystem specific

{
    "section": "core"
}

Database specific

source
"https://advisories.mageia.org/MGASA-2013-0166.json"