Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-2635

Опубликовано: 22 авг. 2018
Источник: debian
EPSS Низкий

Описание

A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could use this flaw to crash libvirtd daemon resulting in denial of service.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libvirtfixed3.0.0-3package
libvirtnot-affectedjessiepackage
libvirtnot-affectedwheezypackage

Примечания

  • Introduced by: https://libvirt.org/git/?p=libvirt.git;a=commit;h=c5f6151390ff0a8e65014172bb8c0a8d312c3353 (v3.0.0-rc1)

  • Fixed by: https://libvirt.org/git/?p=libvirt.git;a=commit;h=c3de387380f6057ee0e46cd9f2f0a092e8070875 (v3.1.0-rc1)

EPSS

Процентиль: 55%
0.00322
Низкий

Связанные уязвимости

CVSS3: 7.7
ubuntu
больше 7 лет назад

A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could use this flaw to crash libvirtd daemon resulting in denial of service.

CVSS3: 7.7
redhat
почти 9 лет назад

A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could use this flaw to crash libvirtd daemon resulting in denial of service.

CVSS3: 7.7
nvd
больше 7 лет назад

A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could use this flaw to crash libvirtd daemon resulting in denial of service.

CVSS3: 6.5
github
больше 3 лет назад

A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could use this flaw to crash libvirtd daemon resulting in denial of service.

EPSS

Процентиль: 55%
0.00322
Низкий