CVE-2013-1962 Denial of service in n/a

Medium 5.0 Published 29 May 2013 Updated 6 Aug 2024

Remote attackers can cause denial of service in libvirt by exhausting file descriptors through repeated volume listing requests.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2013-1962?

CVE-2013-1962 is a medium-severity denial of service vulnerability in Redhat Libvirt, published on 29 May 2013. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of requests "to list all volumes for the particular pool."

Weakness: CWE-399

Which versions are affected by CVE-2013-1962?

It affects 1 product.

Linux distribution packages (24)

`libvirt` Red Hat:enterprise_linux:6::client	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-client` Red Hat:enterprise_linux:6::client	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-debuginfo` Red Hat:enterprise_linux:6::client	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-devel` Red Hat:enterprise_linux:6::client	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-lock-sanlock` Red Hat:enterprise_linux:6::client	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-python` Red Hat:enterprise_linux:6::client	All versions	`0:0.10.2-18.el6_4.5`
`libvirt` Red Hat:enterprise_linux:6::computenode	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-client` Red Hat:enterprise_linux:6::computenode	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-debuginfo` Red Hat:enterprise_linux:6::computenode	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-devel` Red Hat:enterprise_linux:6::computenode	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-lock-sanlock` Red Hat:enterprise_linux:6::computenode	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-python` Red Hat:enterprise_linux:6::computenode	All versions	`0:0.10.2-18.el6_4.5`
`libvirt` Red Hat:enterprise_linux:6::server	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-client` Red Hat:enterprise_linux:6::server	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-debuginfo` Red Hat:enterprise_linux:6::server	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-devel` Red Hat:enterprise_linux:6::server	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-lock-sanlock` Red Hat:enterprise_linux:6::server	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-python` Red Hat:enterprise_linux:6::server	All versions	`0:0.10.2-18.el6_4.5`
`libvirt` Red Hat:enterprise_linux:6::workstation	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-client` Red Hat:enterprise_linux:6::workstation	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-debuginfo` Red Hat:enterprise_linux:6::workstation	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-devel` Red Hat:enterprise_linux:6::workstation	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-lock-sanlock` Red Hat:enterprise_linux:6::workstation	All versions	`0:0.10.2-18.el6_4.5`
`libvirt-python` Red Hat:enterprise_linux:6::workstation	All versions	`0:0.10.2-18.el6_4.5`

Products include Redhat Libvirt.

How do I fix CVE-2013-1962?

Apply the vendor's patch.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2013-1962 being exploited?

There is no known exploitation of CVE-2013-1962 in the wild and no public exploit code.

All Redhat Libvirt vulnerabilities

Sources

Also known as GHSA-6vm5-9cgm-26rc, MGASA-2013-0166, RHSA-2013:0831.