Bug 372963 (CVE-2011-1486)

Summary:	<app-emulation/libvirt-0.9.0: DOS (CVE-2011-1486)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	minor	CC:	cardoe, virtualization
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B4 [glsa]
Package list:		Runtime testing required:	---

Description GLSAMaker/CVETool Bot gentoo-dev

2011-06-25 12:25:13 UTC

CVE-2011-1486 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1486):
  libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting,
  which allows remote attackers to cause a denial of service (crash) by
  causing multiple threads to report errors at the same time.


Please punt the older versions.

Comment 1 Doug Goldstein (RETIRED) gentoo-dev

2011-07-19 20:21:07 UTC

Versions that match this have been removed from the tree.

Comment 2 Tim Sammut (RETIRED) gentoo-dev

2011-08-18 23:34:32 UTC

Thank you. GLSA Vote: no.

Comment 3 Stefan Behte (RETIRED) gentoo-dev

2011-10-08 21:29:00 UTC

Vote: YES. Added to pending GLSA request.

Comment 4 GLSAMaker/CVETool Bot gentoo-dev

2012-02-27 22:32:52 UTC

This issue was resolved and addressed in
 GLSA 201202-07 at http://security.gentoo.org/glsa/glsa-201202-07.xml
by GLSA coordinator Stefan Behte (craig).