vulnerability

CentOS Linux: CVE-2023-3750: Moderate: libvirt security, bug fix, and enhancement update (CESA-2023:6409)

Severity
6
CVSS
(AV:N/AC:M/Au:S/C:N/I:N/A:C)
Published
Jul 24, 2023
Added
Nov 8, 2023
Modified
Jan 28, 2025

Description

A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.

Solutions

centos-upgrade-libvirtcentos-upgrade-libvirt-clientcentos-upgrade-libvirt-client-debuginfocentos-upgrade-libvirt-daemoncentos-upgrade-libvirt-daemon-commoncentos-upgrade-libvirt-daemon-common-debuginfocentos-upgrade-libvirt-daemon-config-networkcentos-upgrade-libvirt-daemon-config-nwfiltercentos-upgrade-libvirt-daemon-debuginfocentos-upgrade-libvirt-daemon-driver-interfacecentos-upgrade-libvirt-daemon-driver-interface-debuginfocentos-upgrade-libvirt-daemon-driver-networkcentos-upgrade-libvirt-daemon-driver-network-debuginfocentos-upgrade-libvirt-daemon-driver-nodedevcentos-upgrade-libvirt-daemon-driver-nodedev-debuginfocentos-upgrade-libvirt-daemon-driver-nwfiltercentos-upgrade-libvirt-daemon-driver-nwfilter-debuginfocentos-upgrade-libvirt-daemon-driver-qemucentos-upgrade-libvirt-daemon-driver-qemu-debuginfocentos-upgrade-libvirt-daemon-driver-secretcentos-upgrade-libvirt-daemon-driver-secret-debuginfocentos-upgrade-libvirt-daemon-driver-storagecentos-upgrade-libvirt-daemon-driver-storage-corecentos-upgrade-libvirt-daemon-driver-storage-core-debuginfocentos-upgrade-libvirt-daemon-driver-storage-diskcentos-upgrade-libvirt-daemon-driver-storage-disk-debuginfocentos-upgrade-libvirt-daemon-driver-storage-iscsicentos-upgrade-libvirt-daemon-driver-storage-iscsi-debuginfocentos-upgrade-libvirt-daemon-driver-storage-logicalcentos-upgrade-libvirt-daemon-driver-storage-logical-debuginfocentos-upgrade-libvirt-daemon-driver-storage-mpathcentos-upgrade-libvirt-daemon-driver-storage-mpath-debuginfocentos-upgrade-libvirt-daemon-driver-storage-rbdcentos-upgrade-libvirt-daemon-driver-storage-rbd-debuginfocentos-upgrade-libvirt-daemon-driver-storage-scsicentos-upgrade-libvirt-daemon-driver-storage-scsi-debuginfocentos-upgrade-libvirt-daemon-kvmcentos-upgrade-libvirt-daemon-lockcentos-upgrade-libvirt-daemon-lock-debuginfocentos-upgrade-libvirt-daemon-logcentos-upgrade-libvirt-daemon-log-debuginfocentos-upgrade-libvirt-daemon-plugin-lockdcentos-upgrade-libvirt-daemon-plugin-lockd-debuginfocentos-upgrade-libvirt-daemon-plugin-sanlock-debuginfocentos-upgrade-libvirt-daemon-proxycentos-upgrade-libvirt-daemon-proxy-debuginfocentos-upgrade-libvirt-debuginfocentos-upgrade-libvirt-debugsourcecentos-upgrade-libvirt-libscentos-upgrade-libvirt-libs-debuginfocentos-upgrade-libvirt-nsscentos-upgrade-libvirt-nss-debuginfocentos-upgrade-libvirt-wireshark-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.