CVE-2014-0179
En bref Sévérité Non disponible EPSS EPSS 0.56 % · centile 46 (2026-10-27) État PUBLISHED Publiée 2014-08-03 Mise à jour 2024-08-06 Attribuée par redhat Statut NVD Modified Description libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read block and hang) via a crafted XML document containing an XML external entity declaration in conjunction with an entity reference to the (1) virConnectCompareCPU or (2) virConnectBaselineCPU API method, related to an XML External Entity (XXE) issue. NOTE: this issue was SPLIT per ADT3 due to different affected versions of some vectors. CVE-2014-5177 is used for other API methods.
Scores Version Score Vecteur Évalué par CVSS 2.0 LOW 1.9 AV:L/AC:M/Au:N/C:N/I:N/A:P NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:a:redhat:libvirt:0.7.5:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.7.6:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.7.7:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.8.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.8.1:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.8.2:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.8.3:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.8.4:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.8.5:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.8.6:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.8.7:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.8.8:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.1:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.2:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.3:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.4:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.5:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.6:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.6.1:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.6.2:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.6.3:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.7:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.8:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.9:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.10:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.11:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.11.1:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.11.2:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.11.3:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.11.4:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.11.5:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.11.6:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.11.7:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.11.8:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.12:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.9.13:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.10.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.10.1:*:*:*:*:*:*:*cpe:2.3:a:redhat:libvirt:0.10.2:*:*:*:*:*:*:*+35 autres Produits affectés Produit Versions affected n/a
Références
Sources
