Description
The lxcDomainGetMemoryParameters method in lxc/lxc_driver.c in libvirt 1.0.5 through 1.2.0 does not properly check the status of LXC guests when reading memory tunables, which allows local users to cause a denial of service (NULL pointer dereference and libvirtd crash) via a guest in the shutdown status, as demonstrated by the "virsh memtune" command.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.ubuntu.com/usn/USN-2093-1 ↗
- http://osvdb.org/101485 ↗
- http://secunia.com/advisories/60895 ↗
- http://security.gentoo.org/glsa/glsa-201412-04.xml ↗
- http://secunia.com/advisories/56245 ↗
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00004.html ↗
- http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=f8c1cb90213508c4f32549023b0572ed774e48aa ↗
- https://www.redhat.com/archives/libvir-list/2013-December/msg01170.html ↗