Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-12430

Опубликовано: 28 апр. 2020
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4
CVSS3: 6.5

Описание

An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is responsible for retrieving domain statistics when managing QEMU guests. This flaw allows unprivileged users with a read-only connection to cause a memory leak in the domstats command, resulting in a potential denial of service.

РелизСтатусПримечание
bionic

not-affected

code not present
devel

released

6.0.0-0ubuntu6
eoan

released

5.4.0-0ubuntu5.4
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/bionic

not-affected

code not present
esm-infra/focal

released

6.0.0-0ubuntu6
esm-infra/xenial

not-affected

code not present
focal

released

6.0.0-0ubuntu6
precise/esm

not-affected

code not present
trusty

ignored

end of standard support

Показывать по

EPSS

Процентиль: 76%
0.00947
Низкий

4 Medium

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
redhat
почти 6 лет назад

An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is responsible for retrieving domain statistics when managing QEMU guests. This flaw allows unprivileged users with a read-only connection to cause a memory leak in the domstats command, resulting in a potential denial of service.

CVSS3: 6.5
nvd
почти 6 лет назад

An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is responsible for retrieving domain statistics when managing QEMU guests. This flaw allows unprivileged users with a read-only connection to cause a memory leak in the domstats command, resulting in a potential denial of service.

CVSS3: 6.5
debian
почти 6 лет назад

An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_dri ...

CVSS3: 6.5
github
больше 3 лет назад

An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is responsible for retrieving domain statistics when managing QEMU guests. This flaw allows unprivileged users with a read-only connection to cause a memory leak in the domstats command, resulting in a potential denial of service.

oracle-oval
больше 5 лет назад

ELSA-2020-5720: libvirt security update (IMPORTANT)

EPSS

Процентиль: 76%
0.00947
Низкий

4 Medium

CVSS2

6.5 Medium

CVSS3