VULNERABILITY INTELLIGENCE

CVE-2012-4423

CVSS score5 MEDIUM
EPSS probability3.72%
CISA KEVNot currently listed
Published2012-11-19
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and segmentation fault) via an RPC call with (1) an event as the RPC number or (2) an RPC number whose value is in a "gap" in the RPC dispatch table.

Primary references