USN-2404-1

See a problem?
Source
https://ubuntu.com/security/notices/USN-2404-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-2404-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-2404-1
Related
Published
2014-11-11T16:32:45.453381Z
Modified
2014-11-11T16:32:45.453381Z
Summary
libvirt vulnerabilities
Details

Pavel Hrdina discovered that libvirt incorrectly handled locking when processing the virConnectListAllDomains command. An attacker could use this issue to cause libvirtd to hang, resulting in a denial of service. (CVE-2014-3657)

Eric Blake discovered that libvirt incorrectly handled permissions when processing the qemuDomainFormatXML command. An attacker with read-only privileges could possibly use this to gain access to certain information from the domain xml file. (CVE-2014-7823)

References

Affected packages

Ubuntu:14.04:LTS / libvirt

Package

Name
libvirt
Purl
pkg:deb/ubuntu/libvirt@1.2.2-0ubuntu13.1.7?arch=src?distro=trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.2-0ubuntu13.1.7

Affected versions

1.*

1.1.1-0ubuntu8
1.1.1-0ubuntu9
1.1.4-0ubuntu2
1.1.4-0ubuntu3
1.1.4-0ubuntu4
1.1.4-0ubuntu5
1.2.0-0ubuntu1
1.2.0-0ubuntu2
1.2.0-0ubuntu3
1.2.1-0ubuntu1
1.2.1-0ubuntu2
1.2.1-0ubuntu3
1.2.1-0ubuntu4
1.2.1-0ubuntu5
1.2.1-0ubuntu7
1.2.1-0ubuntu8
1.2.1-0ubuntu9
1.2.1-0ubuntu10
1.2.2-0ubuntu1
1.2.2-0ubuntu2
1.2.2-0ubuntu3
1.2.2-0ubuntu4
1.2.2-0ubuntu5
1.2.2-0ubuntu6
1.2.2-0ubuntu7
1.2.2-0ubuntu8
1.2.2-0ubuntu9
1.2.2-0ubuntu10
1.2.2-0ubuntu11
1.2.2-0ubuntu12
1.2.2-0ubuntu13
1.2.2-0ubuntu13.1
1.2.2-0ubuntu13.1.1
1.2.2-0ubuntu13.1.2
1.2.2-0ubuntu13.1.4
1.2.2-0ubuntu13.1.5
1.2.2-0ubuntu13.1.6

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "libvirt-dev": "1.2.2-0ubuntu13.1.7",
            "libvirt-doc": "1.2.2-0ubuntu13.1.7",
            "libvirt0-dbg": "1.2.2-0ubuntu13.1.7",
            "libvirt0": "1.2.2-0ubuntu13.1.7",
            "libvirt-bin": "1.2.2-0ubuntu13.1.7"
        }
    ]
}