CVE-2014-8136
libvirt: local denial of service in qemu/qemu_driver.c
Loading…
Severity
LowRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · December 17, 2014
Updated · June 28, 2026
Description
It was found that QEMU's qemuDomainMigratePerform() and qemuDomainMigrateFinish2() functions did not correctly perform a domain unlock on a failed ACL check. A remote attacker able to establish a connection to libvirtd could use this flaw to lock a domain of a more privileged user, causing a denial of service.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 1.8AV:A/AC:H/Au:N/C:N/I:N/A:P
CWE not specified