An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the names
array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libvirt-wireshark-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-storage-rbd": "6.0.0-0ubuntu8.19", "libvirt-doc": "6.0.0-0ubuntu8.19", "libvirt-daemon-system-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-lxc-dbgsym": "6.0.0-0ubuntu8.19", "libvirt0": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-xen-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-daemon-system": "6.0.0-0ubuntu8.19", "libvirt-daemon-system-sysv": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-xen": "6.0.0-0ubuntu8.19", "libnss-libvirt-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-sanlock-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-storage-gluster": "6.0.0-0ubuntu8.19", "libvirt-wireshark": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-qemu": "6.0.0-0ubuntu8.19", "libnss-libvirt": "6.0.0-0ubuntu8.19", "libvirt-daemon": "6.0.0-0ubuntu8.19", "libvirt-daemon-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-storage-gluster-dbgsym": "6.0.0-0ubuntu8.19", "libvirt0-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-clients-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-sanlock": "6.0.0-0ubuntu8.19", "libvirt-daemon-system-systemd": "6.0.0-0ubuntu8.19", "libvirt-dev": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-qemu-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-storage-rbd-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-clients": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-vbox-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-storage-zfs": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-vbox": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-lxc": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-storage-zfs-dbgsym": "6.0.0-0ubuntu8.19" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libvirt-wireshark-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-storage-rbd": "8.0.0-1ubuntu7.10", "libvirt-doc": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-lxc-dbgsym": "8.0.0-1ubuntu7.10", "libvirt0": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-xen-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-storage-iscsi-direct-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-wireshark": "8.0.0-1ubuntu7.10", "libvirt-sanlock-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-xen": "8.0.0-1ubuntu7.10", "libnss-libvirt-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-qemu": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-storage-gluster": "8.0.0-1ubuntu7.10", "libvirt-login-shell-dbgsym": "8.0.0-1ubuntu7.10", "libnss-libvirt": "8.0.0-1ubuntu7.10", "libvirt-daemon-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-daemon": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-storage-gluster-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-daemon-system-sysv": "8.0.0-1ubuntu7.10", "libvirt-daemon-system": "8.0.0-1ubuntu7.10", "libvirt0-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-clients-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-sanlock": "8.0.0-1ubuntu7.10", "libvirt-daemon-system-systemd": "8.0.0-1ubuntu7.10", "libvirt-dev": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-qemu-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-storage-rbd-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-clients": "8.0.0-1ubuntu7.10", "libvirt-daemon-config-network": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-storage-zfs": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-vbox": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-vbox-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-daemon-config-nwfilter": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-storage-iscsi-direct": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-lxc": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-storage-zfs-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-login-shell": "8.0.0-1ubuntu7.10" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libvirt-wireshark-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-storage-rbd": "10.0.0-2ubuntu8.1", "libvirt-doc": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-lxc-dbgsym": "10.0.0-2ubuntu8.1", "libvirt0": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-xen-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-storage-iscsi-direct-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-wireshark": "10.0.0-2ubuntu8.1", "libvirt-sanlock-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-xen": "10.0.0-2ubuntu8.1", "libvirt-daemon-dbgsym": "10.0.0-2ubuntu8.1", "libnss-libvirt-dbgsym": "10.0.0-2ubuntu8.1", "libnss-libvirt": "10.0.0-2ubuntu8.1", "libvirt-login-shell-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-storage-gluster": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-qemu": "10.0.0-2ubuntu8.1", "libvirt-daemon": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-storage-gluster-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-daemon-system-sysv": "10.0.0-2ubuntu8.1", "libvirt-daemon-system": "10.0.0-2ubuntu8.1", "libvirt0-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-clients-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-l10n": "10.0.0-2ubuntu8.1", "libvirt-daemon-system-systemd": "10.0.0-2ubuntu8.1", "libvirt-sanlock": "10.0.0-2ubuntu8.1", "libvirt-dev": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-qemu-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-storage-rbd-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-clients": "10.0.0-2ubuntu8.1", "libvirt-daemon-config-network": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-storage-zfs": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-vbox": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-vbox-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-daemon-config-nwfilter": "10.0.0-2ubuntu8.1", "libvirt-clients-qemu": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-lxc": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-storage-iscsi-direct": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-storage-zfs-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-login-shell": "10.0.0-2ubuntu8.1" } ] }