[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247974

 
 

909

 
 

194654

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ELSA-2014-0914 -- Oracle libvirt

ID: oval:org.secpod.oval:def:1500634Date: (C)2014-08-22   (M)2023-11-10
Class: PATCHFamily: unix




It was found that libvirt passes the XML_PARSE_NOENT flag when parsing XML documents using the libxml2 library, in which case all XML entities in the parsed documents are expanded. A user able to force libvirtd to parse an XML document with an entity pointing to a file could use this flaw to read the contents of that file; parsing an XML document with an entity pointing to a special file that blocks on read access could cause libvirtd to hang indefinitely, resulting in a denial of service on the system.

Platform:
Oracle Linux 7
Product:
libvirt
Reference:
ELSA-2014-0914
CVE-2014-0179
CVE    1
CVE-2014-0179
CPE    73
cpe:/a:redhat:libvirt:1.0.5
cpe:/a:redhat:libvirt:1.2.3
cpe:/a:redhat:libvirt:1.0.6
cpe:/a:redhat:libvirt:1.2.4
...

© SecPod Technologies