Ubuntu 11.04 LTS USN-1180-2 Moderate: Libvirt Service Interruption

ubuntu

July 28, 2011

An authenticated attacker could send crafted input to libvirt and cause it to crash.

Summary

An authenticated attacker could send crafted input to libvirt and cause it

to crash.

Software Description:

- libvirt: Libvirt virtualization toolkit

Details:

Eric Blake discovered an integer overflow flaw in libvirt. A remote

authenticated attacker could exploit this by sending a crafted VCPU RPC

call and cause a denial of service via application crash.

Topics Covered

security advisory moderate denial of service Ubuntu libvirt authenticated access

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
  libvirt-bin                     0.8.8-1ubuntu6.5

Ubuntu 10.10:
  libvirt-bin                     0.8.3-1ubuntu19.1

Ubuntu 10.04 LTS:
  libvirt-bin                     0.7.5-5ubuntu27.16

In general, a standard system update will make all the necessary changes.