Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat libvirt 权限许可和访问控制漏洞
Vulnerability Description
Red Hat libvirt是美国红帽（Red Hat）公司的一个用于实现Linux虚拟化功能的Linux API，它支持各种Hypervisor，包括Xen和KVM，以及QEMU和用于其他操作系统的一些虚拟产品。 Red Hat libvirt 1.2.10及之前版本的‘virConnectGetAllDomainStats’函数的qemu实现过程中存在安全漏洞，该漏洞源于程序没有正确管理锁。远程攻击者可通过发送访问特定用户的请求利用该漏洞造成拒绝服务（死锁或段错误，崩溃）。
CVSS Information
N/A
Vulnerability Type
N/A