Skip to content

GitLab

  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • aports aports
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 742
    • Issues 742
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 354
    • Merge requests 354
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • alpine
  • aportsaports
  • Issues
  • #1891

Closed
Open
Created May 16, 2013 by Peter Kotcauer@kocka

libvirt: DoS (max count of open files exhaustion) due sockets leak in the storage pool (CVE-2013-1962)

A denial of service flaw was found in the way storage pool manager of
libvirt, a C toolkit to interact with the virtualization capabilities of
recent versions of Linux (and other OSes), performed management of
socket file descriptors when ‘to list all volumes for the particular
pool’ request was issued (two socket file descriptors were leaked per
“list all pool volumes” request). An uprivileged user could use this
flaw to cause denial of service (make libvirtd daemon to exhaust / reach
the maximum count of open file descriptors, the libvirtd daemon process
was allowed to open, possibly preventing other users from use of
libvirtd services till the libvirtd daemon was restarted).

References:
https://bugzilla.redhat.com/show\_bug.cgi?id=CVE-2013-1962

Upstream patch:
https://www.redhat.com/archives/libvir-list/2013-May/msg01222.html

(from redmine: issue id 1891, created on 2013-05-16, closed on 2013-05-20)

  • Relations:
    • relates #1892 (closed)
    • relates #1893 (closed)
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking