Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 372963 (CVE-2011-1486)

Summary: <app-emulation/libvirt-0.9.0: DOS (CVE-2011-1486)
Product: Gentoo Security Reporter: GLSAMaker/CVETool Bot <glsamaker>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Severity: minor CC: cardoe, virtualization
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: B4 [glsa]
Package list:
Runtime testing required: ---

Description GLSAMaker/CVETool Bot gentoo-dev 2011-06-25 12:25:13 UTC
CVE-2011-1486 (
  libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting,
  which allows remote attackers to cause a denial of service (crash) by
  causing multiple threads to report errors at the same time.

Please punt the older versions.
Comment 1 Doug Goldstein (RETIRED) gentoo-dev 2011-07-19 20:21:07 UTC
Versions that match this have been removed from the tree.
Comment 2 Tim Sammut (RETIRED) gentoo-dev 2011-08-18 23:34:32 UTC
Thank you. GLSA Vote: no.
Comment 3 Stefan Behte (RETIRED) gentoo-dev Security 2011-10-08 21:29:00 UTC
Vote: YES. Added to pending GLSA request.
Comment 4 GLSAMaker/CVETool Bot gentoo-dev 2012-02-27 22:32:52 UTC
This issue was resolved and addressed in
 GLSA 201202-07 at
by GLSA coordinator Stefan Behte (craig).