CVE-2013-5651

Publication date 30 August 2013

Last updated 24 July 2024

Ubuntu priority

The virBitmapParse function in util/virbitmap.c in libvirt before 1.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a crafted bitmap, as demonstrated by a large nodeset value to numatune.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
libvirt	13.04 raring	Fixed 1.0.2-0ubuntu11.13.04.4
	12.10 quantal	Not affected
	12.04 LTS precise	Not affected
	10.04 LTS lucid	Not affected

Notes

jdstrand

Ubuntu 12.10 and lower are not affected

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
libvirt	Upstream: http://libvirt.org/git/?p=libvirt.git;a=commit;h=47b9127e883677a0d60d767030a147450e919a25 Upstream: http://libvirt.org/git/?p=libvirt.git;a=commit;h=106a2ddaa7b5ef7d69242333e48d77fda0b7ccf3

CVE-2013-5651

Status

Notes

jdstrand

Patch details

References

Related Ubuntu Security Notices (USN)

Other references