CVE-2011-1146

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-03-15 · updated 2026-06-16
Weakness: CWE-264

Description

libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service (host OS crash) or possibly execute arbitrary code via a (1) virNodeDeviceDettach, (2) virNodeDeviceReset, (3) virDomainRevertToSnapshot, (4) virDomainSnapshotDelete, (5) virNodeDeviceReAttach, or (6) virConnectDomainXMLToNative call, a different vulnerability than CVE-2008-5086.

Affected products

libvirt: 0.8.8

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=617773
http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=71753cb7f7a16ff800381c0b5ee4e99eea92fed3
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056209.html
http://lists.opensuse.org/opensuse-updates/2011-04/msg00022.html
http://openwall.com/lists/oss-security/2011/03/09/3
http://openwall.com/lists/oss-security/2011/03/10/5
http://secunia.com/advisories/43670
http://secunia.com/advisories/43780
http://secunia.com/advisories/43897
http://secunia.com/advisories/43917
http://secunia.com/advisories/44069
http://www.debian.org/security/2011/dsa-2194

Get alerted when CVE-2011-1146 or the next vulnerability affects your stack