From ${URL} : A denial of service flaw was found in the way storage pool manager of libvirt, a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes), performed management of socket file descriptors when 'to list all volumes for the particular pool' request was issued (two socket file descriptors were leaked per "list all pool volumes" request). An uprivileged user could use this flaw to cause denial of service (make libvirtd daemon to exhaust / reach the maximum count of open file descriptors, the libvirtd daemon process was allowed to open, possibly preventing other users from use of libvirtd services till the libvirtd daemon was restarted). Upstream patch: https://www.redhat.com/archives/libvir-list/2013-May/msg01222.html @maintainer(s): after the bump, in case we need to stabilize the package, please say explicitly if it is ready for the stabilization or not.
This has been fixed in the tree. Use libvirt-1.0.5.1-r2. TARGET_KEYWORDS=amd64 x86
(In reply to Doug Goldstein from comment #1) > This has been fixed in the tree. Use libvirt-1.0.5.1-r2. > > TARGET_KEYWORDS=amd64 x86 Please stabilize 1.0.5.1-r3. Any version 1.0.5 or newer will satisfy this CVE.
amd64 stable
x86 stable
CVE-2013-1962 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1962): The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of requests "to list all volumes for the particular pool."
This issue was resolved and addressed in GLSA 201309-18 at http://security.gentoo.org/glsa/glsa-201309-18.xml by GLSA coordinator Chris Reffett (creffett).
