Wind River Support Network

HomeDefectsLIN8-3377

Fixed

LIN8-3377 : Security Advisory - libvirt - CVE-2015-5247

Created: Apr 25, 2016 Updated: Dec 3, 2018

Resolved Date: Apr 28, 2016

Found In Version: 8.0

Fix Version: 8.0.0.5

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Userspace

Description

The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by triggering a failed unlink after creating a volume on a root_squash NFS pool.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5247

Other Downloads

CVEs

CVE-2015-5247