CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Permissions Privileges and Access Controls
Summary: the qemu implementation of virconnectgetalldomainstats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to acl restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/NONE/PARTIAL
Published Date: 2015-01-06
Last Modified Date: 2015-01-06