https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T13:42:35.677325+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2014-3657 CVE-2014-3657 2026-10-02T13:42:35.817083+00:00

The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial of service (deadlock) via a NULL value in the second parameter in the virConnectListAllDomains API command.

 https://vulnerability.circl.lu/vuln/usn-2404-1 USN-2404-1 — libvirt vulnerabilities 2026-10-02T13:42:35.817168+00:00

Affected: Ubuntu:14.04:LTS: libvirt

Pavel Hrdina discovered that libvirt incorrectly handled locking when processing the virConnectListAllDomains command. An attacker could use this issue to cause libvirtd to hang, resulting in a denial of service. (CVE-2014-3657)

Eric Blake discovered that libvirt incorrectly handled permissions when processing the qemuDomainFormatXML command. An attacker with read-only privileges could possibly use this to gain access to certain information from the domain xml file. (CVE-2014-7823)