CVE-2014-3657)Eric Blake discovered that libvirt incorrectly handled permissions whenprocessing the qemuDomainFormatXML command. An attacker with read-onlyprivileges could possibly use this to gain access to certain informationfrom the domain xml file. (CVE-2014-7823)"> OVAL Reference oval:org.mitre.oval:def:28138 - CERT Civis.Net
Oval Definition:
oval:org.mitre.oval:def:28138
Revision Date:
2015-03-09
Version:
5
Title:
USN-2404-1 -- libvirt vulnerabilities
Description:
Pavel Hrdina discovered that libvirt incorrectly handled locking whenprocessing the virConnectListAllDomains command. An attacker could use thisissue to cause libvirtd to hang, resulting in a denial of service.(CVE-2014-3657)Eric Blake discovered that libvirt incorrectly handled permissions whenprocessing the qemuDomainFormatXML command. An attacker with read-onlyprivileges could possibly use this to gain access to certain informationfrom the domain xml file. (CVE-2014-7823)