CVE-2012-3445 Memory corruption in n/a

Low 3.5 Published 7 Aug 2012 Updated 6 Aug 2024

Remote authenticated users can crash the libvirtd daemon via a crafted RPC command, causing a denial of service.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2012-3445?

CVE-2012-3445 is a low-severity memory corruption vulnerability in Redhat Libvirt, published on 7 Aug 2012. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain* API calls with typed parameters, which might allow remote authenticated users to cause a denial of service (libvirtd crash) via an RPC command with nparams set to zero, which triggers an out-of-bounds read or a free of an invalid pointer.

Weakness: CWE-399

Which versions are affected by CVE-2012-3445?

It affects 1 product.

Linux distribution packages (24)

`libvirt` Red Hat:enterprise_linux:6::client	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-client` Red Hat:enterprise_linux:6::client	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-debuginfo` Red Hat:enterprise_linux:6::client	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-devel` Red Hat:enterprise_linux:6::client	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-lock-sanlock` Red Hat:enterprise_linux:6::client	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-python` Red Hat:enterprise_linux:6::client	All versions	`0:0.9.10-21.el6_3.4`
`libvirt` Red Hat:enterprise_linux:6::computenode	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-client` Red Hat:enterprise_linux:6::computenode	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-debuginfo` Red Hat:enterprise_linux:6::computenode	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-devel` Red Hat:enterprise_linux:6::computenode	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-lock-sanlock` Red Hat:enterprise_linux:6::computenode	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-python` Red Hat:enterprise_linux:6::computenode	All versions	`0:0.9.10-21.el6_3.4`
`libvirt` Red Hat:enterprise_linux:6::server	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-client` Red Hat:enterprise_linux:6::server	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-debuginfo` Red Hat:enterprise_linux:6::server	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-devel` Red Hat:enterprise_linux:6::server	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-lock-sanlock` Red Hat:enterprise_linux:6::server	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-python` Red Hat:enterprise_linux:6::server	All versions	`0:0.9.10-21.el6_3.4`
`libvirt` Red Hat:enterprise_linux:6::workstation	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-client` Red Hat:enterprise_linux:6::workstation	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-debuginfo` Red Hat:enterprise_linux:6::workstation	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-devel` Red Hat:enterprise_linux:6::workstation	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-lock-sanlock` Red Hat:enterprise_linux:6::workstation	All versions	`0:0.9.10-21.el6_3.4`
`libvirt-python` Red Hat:enterprise_linux:6::workstation	All versions	`0:0.9.10-21.el6_3.4`

Products include Redhat Libvirt.

How do I fix CVE-2012-3445?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2012-3445 being exploited?

There is no known exploitation of CVE-2012-3445 in the wild and no public exploit code.

All Redhat Libvirt vulnerabilities

Sources

Also known as DEBIAN-CVE-2012-3445, GHSA-65xv-xg43-h8gj, RHSA-2012:1202.