SecuritySpace - CVE-2013-4399

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2013-4399

Description: The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service (use-after-free and crash) by registering an event handler and then closing the connection.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-4399
BugTraq ID: 62972
http://www.securityfocus.com/bid/62972
http://security.gentoo.org/glsa/glsa-201412-04.xml
http://secunia.com/advisories/60895

CVE ID:	CVE-2013-4399
Description:	The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service (use-after-free and crash) by registering an event handler and then closing the connection.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4399 BugTraq ID: 62972 http://www.securityfocus.com/bid/62972 http://security.gentoo.org/glsa/glsa-201412-04.xml http://secunia.com/advisories/60895