ALT-PU-2018-2137-2

Package update libvirt in branch sisyphus

Version4.6.0-alt1.S1

Published2026-02-04

Max severityMEDIUM

Severity:

Closed issues (2)

MEDIUM5.5

Уязвимость функции virPCIVirtualFunctionList библиотеки управления виртуализацией Libvirt, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2024-04-11Modified: 2024-11-11

CVSS 3.xMEDIUM 5.5

CVSS:3.x/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS 2.0MEDIUM 4.6

CVSS:2.0/AV:L/AC:L/Au:S/C:N/I:N/A:C

References

CVE-2023-2700

MEDIUM5.5

A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's g_autoptr cleanup.

Published: 2023-05-15Modified: 2025-01-28

CVSS 3.xMEDIUM 5.5

CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References