Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The storageVolUpload function in storage/storage_driver.c in libvirt before 1.2.11 does not check a certain return value, which allows local users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted offset value in a "virsh vol-upload" command.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat libvirt‘storageVolUpload’函数拒绝服务漏洞
Vulnerability Description
Red Hat libvirt是美国红帽（Red Hat）公司的一个用于实现Linux虚拟化功能的Linux API，它支持各种Hypervisor，包括Xen和KVM，以及QEMU和用于其他操作系统的一些虚拟产品。 Red Hat libvirt的storage/storage_driver.c文件中的‘storageVolUpload’函数存在安全漏洞，该漏洞源于程序没有检查特定的返回值。本地攻击者可借助virsh vol-upload命令中特制的偏移值利用该漏洞造成拒绝服务（空指针逆向引用和守护进程
CVSS Information
N/A
Vulnerability Type
N/A