Security Advisory

CVE-2012-3445

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-08-07 21:00:00

Last updated 2024-08-06 20:05:12

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

The virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain* API calls with typed parameters, which might allow remote authenticated users to cause a denial of service (libvirtd crash) via an RPC command with nparams set to zero, which triggers an out-of-bounds read or a free of an invalid pointer.

← Browse all CVEs View on cve.org ↗