What’s Vulnerable › Vulnerabilities

CVE-2013-0170

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-02-08 · updated 2026-06-16
• Weakness: CWE-416

Description

Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6 before 0.9.6.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering certain errors during an RPC connection, which causes a message to be freed without being removed from the message queue.

Affected products

• Canonical Ubuntu Linux: 12.04, 12.10
• Fedoraproject Fedora: 16, 17, 18
• Opensuse: 12.1, 12.2
• RedHat Enterprise Linux Desktop: 6.0
• RedHat Enterprise Linux Eus: 6.3
• RedHat Enterprise Linux Server: 6.0
• RedHat Enterprise Linux Workstation: 6.0
• libvirt: from 0.9.6 before 0.9.6.4; from 0.9.11 before 0.9.11.9; from 0.10.2 before 0.10.2.3; from 1.0.0 before 1.0.2 — fixed in 0.10.2.3, 0.9.11.9, 0.9.6.4, 1.0.2
• SUSE Linux Enterprise Server 15 SP1: 11-sp2
• SUSE Linux Enterprise Server: 11-sp2
• SUSE Linux Enterprise Software Development Kit: 11-sp2

How to fix

Upgrade to a fixed version: libvirt 0.10.2.3, 0.9.11.9, 0.9.6.4, 1.0.2. Check the vendor advisory for mitigations.

References

• http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=46532e3e8ed5f5a736a02f67d6c805492f9ca720
• http://libvirt.org/news.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098326.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098370.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098398.html
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00002.html
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00016.html
• http://osvdb.org/89644
• http://rhn.redhat.com/errata/RHSA-2013-0199.html
• http://secunia.com/advisories/52001
• http://secunia.com/advisories/52003

Get alerted when CVE-2013-0170 or the next vulnerability affects your stack