VULNERABILITY INTELLIGENCE
CVE-2013-6458
CVSS score6.8 MEDIUM
EPSS probability0.59%
CISA KEVNot currently listed
Published2014-01-24
Last modified2026-06-17
CVSS vectorAV:A/AC:H/Au:N/C:C/I:C/A:C
Description
Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.
Weakness classification
- CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')