CVE-2009-0036

published 2009-02-11

CVE-2009-0036: Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a…

Priority P4 23 medium 4.4 CVSS 2.0

AV L AC M Au N C P I P A P

EXPLOIT

Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sending the remainder of the packet with crafted values in the header, related to use of uninitialized memory in a validation check.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	libvirt	< libvirt 0.5.1-7 (bookworm)	libvirt 0.5.1-7 (bookworm)
libvirt	libvirt	—	—
redhat	libvirt	>= 0 < 0.5.1-7	0.5.1-7
redhat	libvirt	>= 0 < 0.5.1-7	0.5.1-7
redhat	libvirt	>= 0 < 0.5.1-7	0.5.1-7
redhat	libvirt	>= 0 < 0.5.1-7	0.5.1-7

CVSS provenance

nvd v2.0 4.4 MEDIUM AV:L/AC:M/Au:N/C:P/I:P/A:P

osv 4.4 MEDIUM

vendor_debian 4.4 LOW

vendor_redhat 4.4 MEDIUM

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-119