Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2014.1685
libvirt security update
29 September 2014
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: libvirt
Publisher: Debian
Operating System: Debian GNU/Linux 7
UNIX variants (UNIX, Linux, OSX)
Impact/Access: Denial of Service -- Existing Account
Access Confidential Data -- Existing Account
Resolution: Patch/Upgrade
CVE Names: CVE-2014-3633 CVE-2014-0179
Reference: ESB-2014.1209
ESB-2014.0889
ESB-2014.0834
Original Bulletin:
http://www.debian.org/security/2014/dsa-3038
Comment: This advisory references vulnerabilities in products which run on
platforms other than Debian. It is recommended that administrators
running libvirt check for an updated version of the software for
their operating system.
- --------------------------BEGIN INCLUDED TEXT--------------------
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- - -------------------------------------------------------------------------
Debian Security Advisory DSA-3038-1 security@debian.org
http://www.debian.org/security/ Salvatore Bonaccorso
September 27, 2014 http://www.debian.org/security/faq
- - -------------------------------------------------------------------------
Package : libvirt
CVE ID : CVE-2014-0179 CVE-2014-3633
Debian Bug : 762203
Several vulnerabilities were discovered in Libvirt, a virtualisation
abstraction library. The Common Vulnerabilities and Exposures project
identifies the following problems:
CVE-2014-0179
Richard Jones and Daniel P. Berrange found that libvirt passes the
XML_PARSE_NOENT flag when parsing XML documents using the libxml2
library, in which case all XML entities in the parsed documents are
expanded. A user able to force libvirtd to parse an XML document
with an entity pointing to a special file that blocks on read access
could use this flaw to cause libvirtd to hang indefinitely,
resulting in a denial of service on the system.
CVE-2014-3633
Luyao Huang of Red Hat found that the qemu implementation of
virDomainGetBlockIoTune computed an index into the array of disks
for the live definition, then used it as the index into the array of
disks for the persistent definition, which could result into an
out-of-bounds read access in qemuDomainGetBlockIoTune().
A remote attacker able to establish a read-only connection to
libvirtd could use this flaw to crash libvirtd or, potentially, leak
memory from the libvirtd process.
For the stable distribution (wheezy), these problems have been fixed in
version 0.9.12.3-1+deb7u1.
For the unstable distribution (sid), these problems have been fixed in
version 1.2.8-2.
We recommend that you upgrade your libvirt packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=Ua8d
- -----END PGP SIGNATURE-----
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
http://www.auscert.org.au/render.html?cid=1980
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=cF6R
-----END PGP SIGNATURE-----