CVE-2013-7336
EPSS 0.07%Published: 5/7/2014Modified: 4/28/2026
Description
The qemuMigrationWaitForSpice function in qemu/qemu_migration.c in libvirt before 1.1.3 does not properly enter a monitor when performing seamless SPICE migration, which allows local users to cause a denial of service (NULL pointer dereference and libvirtd crash) by causing domblkstat to be called at the same time as the qemuMonitorGetSpiceMigrationStatus function.
Affected packages (1)
- Debian/libvirtfrom 0, < 1.1.4-1