A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash.
{
"unresolved_ranges": [
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:21.10:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "21.10"
}
],
"vendor_product": "canonical:ubuntu_linux"
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "10.0"
},
{
"last_affected": "11.0"
}
],
"vendor_product": "debian:debian_linux"
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "35"
}
],
"vendor_product": "fedoraproject:fedora"
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "8.0"
}
],
"vendor_product": "redhat:enterprise_linux"
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "8.6"
}
],
"vendor_product": "redhat:enterprise_linux_eus"
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "8.0"
}
],
"vendor_product": "redhat:enterprise_linux_for_ibm_z_systems"
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "8.6"
}
],
"vendor_product": "redhat:enterprise_linux_for_ibm_z_systems_eus"
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "8.0"
}
],
"vendor_product": "redhat:enterprise_linux_for_power_little_endian"
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "8.6"
}
],
"vendor_product": "redhat:enterprise_linux_for_power_little_endian_eus"
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "8.6"
}
],
"vendor_product": "redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions"
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "8.6"
}
],
"vendor_product": "redhat:enterprise_linux_server_tus"
}
]
}{
"source": [
"CPE_RANGE",
"REFERENCES"
],
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "7.1.0"
}
],
"cpe": "cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*"
}