Total vulnerabilities in the database
The lxcDomainGetMemoryParameters method in lxc/lxc_driver.c in libvirt 1.0.5 through 1.2.0 does not properly check the status of LXC guests when reading memory tunables, which allows local users to cause a denial of service (NULL pointer dereference and libvirtd crash) via a guest in the shutdown status, as demonstrated by the "virsh memtune" command.
| Software | From | Fixed in |
|---|---|---|
| redhat / libvirt | 1.0.5.4 | 1.0.5.4.x |
| redhat / libvirt | 1.0.5.3 | 1.0.5.3.x |
| redhat / libvirt | 1.0.5 | 1.0.5.x |
| redhat / libvirt | 1.0.5.6 | 1.0.5.6.x |
| redhat / libvirt | 1.2.0 | 1.2.0.x |
| redhat / libvirt | 1.1.2 | 1.1.2.x |
| redhat / libvirt | 1.1.4 | 1.1.4.x |
| redhat / libvirt | 1.0.6 | 1.0.6.x |
| redhat / libvirt | 1.1.1 | 1.1.1.x |
| redhat / libvirt | 1.0.5.1 | 1.0.5.1.x |
| redhat / libvirt | 1.0.5.2 | 1.0.5.2.x |
| redhat / libvirt | 1.0.5.5 | 1.0.5.5.x |
| redhat / libvirt | 1.1.0 | 1.1.0.x |
| redhat / libvirt | 1.1.3 | 1.1.3.x |