[ GLSA 201412-36 ] libvirt: Denial of Service

[GLSA]

Gentoo Linux Security Advisory

Title: libvirt: Denial of Service (GLSA 201412-36)
Severity: normal
Exploitable: local, remote
Date: December 24, 2014
Bug(s): #532204, #533286
ID: 201412-36

Synopsis

Multiple vulnerabilities have been found in libvirt, worst of which
allows context-dependent attackers to cause Denial of Service.


Background

libvirt is a C toolkit for manipulating virtual machines.

Affected Packages

Package: app-emulation/libvirt
Vulnerable: < 1.2.10-r3
Unaffected: >= 1.2.10-r3
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in libvirt. Please review
the CVE identifiers referenced below for details.


Impact

A context-dependent attacker may be able to cause Denial of Service.

Workaround

There is no known workaround at this time.

Resolution

All libvirt users should upgrade to the latest version: