A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=2034195 | Issue Tracking Patch Vendor Advisory |
https://lists.debian.org/debian-lts-announce/2024/04/msg00000.html | |
https://security.netapp.com/advisory/ntap-20220513-0004/ | Third Party Advisory |
Configurations
History
01 Apr 2024, 13:16
Type | Values Removed | Values Added |
---|---|---|
References |
|
13 May 2022, 22:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
07 Apr 2022, 16:34
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2034195 - Issue Tracking, Patch, Vendor Advisory | |
CWE | CWE-667 | |
CVSS |
v2 : v3 : |
v2 : 4.9
v3 : 6.5 |
CPE | cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:* |
25 Mar 2022, 19:44
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-03-25 19:15
Updated : 2024-04-01 13:16
NVD link : CVE-2021-4147
Mitre link : CVE-2021-4147
CVE.ORG link : CVE-2021-4147
JSON object : View
Products Affected
redhat
- libvirt
fedoraproject
- fedora
netapp
- ontap_select_deploy_administration_utility
CWE
CWE-667
Improper Locking