cbcvebase.
CVE-2021-4147
published 2022-03-25

CVE-2021-4147: A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting…

medium6.5CVSS 3.1
AVLACLPRLUINSCCNINAH
A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.

Affected

10 ranges
VendorProductVersion rangeFixed in
debianlibvirt< libvirt 7.10.0-2 (bookworm)libvirt 7.10.0-2 (bookworm)
fedoraprojectfedora
redhatlibvirt< 2.33.02.33.0
redhatlibvirt
redhatlibvirt>= 0 < 7.0.0-3+deb11u37.0.0-3+deb11u3
redhatlibvirt>= 0 < 7.10.0-27.10.0-2
redhatlibvirt>= 0 < 7.10.0-27.10.0-2
redhatlibvirt>= 0 < 7.10.0-27.10.0-2
redhatlibvirt>= 0 < 4.0.0-1ubuntu8.214.0.0-1ubuntu8.21
redhatlibvirt>= 0 < 6.0.0-0ubuntu8.166.0.0-0ubuntu8.16

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
osv6.7MEDIUM