Unscored severity · published May 7, 2014
CVE-2013-7336
The qemuMigrationWaitForSpice function in qemu/qemu_migration.c in libvirt before 1.1.3 does not properly enter a monitor when performing seamless SPICE migration, which allows…
–
CVSS
0.3%
EPSS
No
On KEV
Description
The qemuMigrationWaitForSpice function in qemu/qemu_migration.c in libvirt before 1.1.3 does not properly enter a monitor when performing seamless SPICE migration, which allows local users to cause a denial of service (NULL pointer dereference and libvirtd crash) by causing domblkstat to be called at the same time as the qemuMonitorGetSpiceMigrationStatus function.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libvirt · Redhat
through 1.1.2; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +10 more · source: NVD
OP
Opensuse · Opensuse
13.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-7336
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-7336
libvirt.org
http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=484cc321
libvirt.org
http://libvirt.org/news.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2014-05/msg00004.html
secunia.com
http://secunia.com/advisories/60895
security.gentoo.org
http://security.gentoo.org/glsa/glsa-201412-04.xml
www.openwall.com
http://www.openwall.com/lists/oss-security/2014/03/18/1
More from Opensuse
9.8
CVE-2016-4171
Adobe Flash Player Remote Code Execution Vulnerability
9.8
CVE-2016-4117
Adobe Flash Player Arbitrary Code Execution Vulnerability
9.8
CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability
9.8
CVE-2015-2590
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
9.8
CVE-2015-5119
Adobe Flash Player Use-After-Free Vulnerability