CVE-2014-1447

EUVD-2014-1523
Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a connection before a keepalive response is sent.
Race Condition
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.3 UNKNOWN
ADJACENT_NETWORK
LOW
AV:A/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
Affected Products (NVD)
VendorProductVersion
redhatlibvirt
𝑥
≤ 1.2.0
redhatlibvirt
0.0.1
redhatlibvirt
0.0.2
redhatlibvirt
0.0.3
redhatlibvirt
0.0.4
redhatlibvirt
0.0.5
redhatlibvirt
0.0.6
redhatlibvirt
0.1.0
redhatlibvirt
0.1.1
redhatlibvirt
0.1.3
redhatlibvirt
0.1.4
redhatlibvirt
0.1.5
redhatlibvirt
0.1.6
redhatlibvirt
0.1.7
redhatlibvirt
0.1.8
redhatlibvirt
0.1.9
redhatlibvirt
0.2.0
redhatlibvirt
0.2.1
redhatlibvirt
0.2.2
redhatlibvirt
0.2.3
redhatlibvirt
0.3.0
redhatlibvirt
0.3.1
redhatlibvirt
0.3.2
redhatlibvirt
0.3.3
redhatlibvirt
0.4.0
redhatlibvirt
0.4.1
redhatlibvirt
0.4.2
redhatlibvirt
0.4.3
redhatlibvirt
0.4.4
redhatlibvirt
0.4.5
redhatlibvirt
0.4.6
redhatlibvirt
0.5.0
redhatlibvirt
0.5.1
redhatlibvirt
0.6.0
redhatlibvirt
0.6.1
redhatlibvirt
0.6.2
redhatlibvirt
0.6.3
redhatlibvirt
0.6.4
redhatlibvirt
0.6.5
redhatlibvirt
0.7.0
redhatlibvirt
0.7.1
redhatlibvirt
0.7.2
redhatlibvirt
0.7.3
redhatlibvirt
0.7.4
redhatlibvirt
0.7.5
redhatlibvirt
0.7.6
redhatlibvirt
0.7.7
redhatlibvirt
0.8.0
redhatlibvirt
0.8.1
redhatlibvirt
0.8.2
redhatlibvirt
0.8.3
redhatlibvirt
0.8.4
redhatlibvirt
0.8.5
redhatlibvirt
0.8.6
redhatlibvirt
0.8.7
redhatlibvirt
0.8.8
redhatlibvirt
0.9.0
redhatlibvirt
0.9.1
redhatlibvirt
0.9.2
redhatlibvirt
0.9.3
redhatlibvirt
0.9.4
redhatlibvirt
0.9.5
redhatlibvirt
0.9.6
redhatlibvirt
0.9.6.1
redhatlibvirt
0.9.6.2
redhatlibvirt
0.9.6.3
redhatlibvirt
0.9.7
redhatlibvirt
0.9.8
redhatlibvirt
0.9.9
redhatlibvirt
0.9.10
redhatlibvirt
0.9.11
redhatlibvirt
0.9.11.1
redhatlibvirt
0.9.11.2
redhatlibvirt
0.9.11.3
redhatlibvirt
0.9.11.4
redhatlibvirt
0.9.11.5
redhatlibvirt
0.9.11.6
redhatlibvirt
0.9.11.7
redhatlibvirt
0.9.11.8
redhatlibvirt
0.9.12
redhatlibvirt
0.9.13
redhatlibvirt
0.10.0
redhatlibvirt
0.10.1
redhatlibvirt
0.10.2
redhatlibvirt
0.10.2.1
redhatlibvirt
0.10.2.2
redhatlibvirt
0.10.2.3
redhatlibvirt
0.10.2.4
redhatlibvirt
0.10.2.5
redhatlibvirt
0.10.2.6
redhatlibvirt
0.10.2.7
redhatlibvirt
0.10.2.8
redhatlibvirt
1.0.0
redhatlibvirt
1.0.1
redhatlibvirt
1.0.2
redhatlibvirt
1.0.3
redhatlibvirt
1.0.4
redhatlibvirt
1.0.5
redhatlibvirt
1.0.5.1
redhatlibvirt
1.0.5.2
redhatlibvirt
1.0.5.3
redhatlibvirt
1.0.5.4
redhatlibvirt
1.0.5.5
redhatlibvirt
1.0.5.6
redhatlibvirt
1.0.6
redhatlibvirt
1.1.0
redhatlibvirt
1.1.1
redhatlibvirt
1.1.2
redhatlibvirt
1.1.3
redhatlibvirt
1.1.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libvirt
bookworm
9.0.0-4+deb12u1
fixed
bullseye
7.0.0-3+deb11u3
fixed
sid
10.9.0-1
fixed
trixie
10.9.0-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libvirt
lucid
not-affected
precise
Fixed 0.9.8-2ubuntu17.17
released
quantal
Fixed 0.9.13-0ubuntu12.6
released
raring
ignored
saucy
Fixed 1.1.1-0ubuntu8.5
released