CVE-2013-4297

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-09-30 · updated 2026-06-16
Weakness: CWE-119

Description

The virFileNBDDeviceAssociate function in util/virfile.c in libvirt 1.1.2 and earlier allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and crash) via unspecified vectors.

Affected products

libvirt: through 1.1.2; 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6 (+88)

References

http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=2dba0323ff0cec31bdcea9dd3b2428af297401f2
http://secunia.com/advisories/60895
http://security.gentoo.org/glsa/glsa-201412-04.xml
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4297
http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=2dba0323ff0cec31bdcea9dd3b2428af297401f2
http://secunia.com/advisories/60895
http://security.gentoo.org/glsa/glsa-201412-04.xml
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4297

Get alerted when CVE-2013-4297 or the next vulnerability affects your stack