cbcvebase.
CVE-2012-4423
published 2012-11-19

CVE-2012-4423: The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and…

medium5CVSS 3.1
AVNACLAuNCNINAP
The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and segmentation fault) via an RPC call with (1) an event as the RPC number or (2) an RPC number whose value is in a "gap" in the RPC dispatch table.

Affected

76 ranges· showing 25
VendorProductVersion rangeFixed in
debianlibvirt< libvirt 0.9.12-5 (bookworm)libvirt 0.9.12-5 (bookworm)
redhatlibvirt<= 0.10.1
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt

CVSS provenance

nvd5.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM