VULNERABILITY INTELLIGENCE
CVE-2014-8135
CVSS score2.1 LOW
EPSS probability0.47%
CISA KEVNot currently listed
Published2014-12-19
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:P
Description
The storageVolUpload function in storage/storage_driver.c in libvirt before 1.2.11 does not check a certain return value, which allows local users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted offset value in a "virsh vol-upload" command.