A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a crash due to the negative length being treated as a huge positive number. This flaw allows a local, unprivileged user to perform a denial of service attack by causing the libvirt daemon to crash.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libvirt-wireshark-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-storage-rbd": "6.0.0-0ubuntu8.19", "libvirt-doc": "6.0.0-0ubuntu8.19", "libvirt-daemon-system-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-lxc-dbgsym": "6.0.0-0ubuntu8.19", "libvirt0": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-xen-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-daemon-system": "6.0.0-0ubuntu8.19", "libvirt-daemon-system-sysv": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-xen": "6.0.0-0ubuntu8.19", "libnss-libvirt-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-sanlock-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-storage-gluster": "6.0.0-0ubuntu8.19", "libvirt-wireshark": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-qemu": "6.0.0-0ubuntu8.19", "libnss-libvirt": "6.0.0-0ubuntu8.19", "libvirt-daemon": "6.0.0-0ubuntu8.19", "libvirt-daemon-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-storage-gluster-dbgsym": "6.0.0-0ubuntu8.19", "libvirt0-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-clients-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-sanlock": "6.0.0-0ubuntu8.19", "libvirt-daemon-system-systemd": "6.0.0-0ubuntu8.19", "libvirt-dev": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-qemu-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-storage-rbd-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-clients": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-vbox-dbgsym": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-storage-zfs": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-vbox": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-lxc": "6.0.0-0ubuntu8.19", "libvirt-daemon-driver-storage-zfs-dbgsym": "6.0.0-0ubuntu8.19" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libvirt-wireshark-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-storage-rbd": "8.0.0-1ubuntu7.10", "libvirt-doc": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-lxc-dbgsym": "8.0.0-1ubuntu7.10", "libvirt0": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-xen-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-storage-iscsi-direct-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-wireshark": "8.0.0-1ubuntu7.10", "libvirt-sanlock-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-xen": "8.0.0-1ubuntu7.10", "libnss-libvirt-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-qemu": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-storage-gluster": "8.0.0-1ubuntu7.10", "libvirt-login-shell-dbgsym": "8.0.0-1ubuntu7.10", "libnss-libvirt": "8.0.0-1ubuntu7.10", "libvirt-daemon-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-daemon": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-storage-gluster-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-daemon-system-sysv": "8.0.0-1ubuntu7.10", "libvirt-daemon-system": "8.0.0-1ubuntu7.10", "libvirt0-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-clients-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-sanlock": "8.0.0-1ubuntu7.10", "libvirt-daemon-system-systemd": "8.0.0-1ubuntu7.10", "libvirt-dev": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-qemu-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-storage-rbd-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-clients": "8.0.0-1ubuntu7.10", "libvirt-daemon-config-network": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-storage-zfs": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-vbox": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-vbox-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-daemon-config-nwfilter": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-storage-iscsi-direct": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-lxc": "8.0.0-1ubuntu7.10", "libvirt-daemon-driver-storage-zfs-dbgsym": "8.0.0-1ubuntu7.10", "libvirt-login-shell": "8.0.0-1ubuntu7.10" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libvirt-wireshark-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-storage-rbd": "10.0.0-2ubuntu8.1", "libvirt-doc": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-lxc-dbgsym": "10.0.0-2ubuntu8.1", "libvirt0": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-xen-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-storage-iscsi-direct-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-wireshark": "10.0.0-2ubuntu8.1", "libvirt-sanlock-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-xen": "10.0.0-2ubuntu8.1", "libvirt-daemon-dbgsym": "10.0.0-2ubuntu8.1", "libnss-libvirt-dbgsym": "10.0.0-2ubuntu8.1", "libnss-libvirt": "10.0.0-2ubuntu8.1", "libvirt-login-shell-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-storage-gluster": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-qemu": "10.0.0-2ubuntu8.1", "libvirt-daemon": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-storage-gluster-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-daemon-system-sysv": "10.0.0-2ubuntu8.1", "libvirt-daemon-system": "10.0.0-2ubuntu8.1", "libvirt0-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-clients-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-l10n": "10.0.0-2ubuntu8.1", "libvirt-daemon-system-systemd": "10.0.0-2ubuntu8.1", "libvirt-sanlock": "10.0.0-2ubuntu8.1", "libvirt-dev": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-qemu-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-storage-rbd-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-clients": "10.0.0-2ubuntu8.1", "libvirt-daemon-config-network": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-storage-zfs": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-vbox": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-vbox-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-daemon-config-nwfilter": "10.0.0-2ubuntu8.1", "libvirt-clients-qemu": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-lxc": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-storage-iscsi-direct": "10.0.0-2ubuntu8.1", "libvirt-daemon-driver-storage-zfs-dbgsym": "10.0.0-2ubuntu8.1", "libvirt-login-shell": "10.0.0-2ubuntu8.1" } ] }