Every CVE Search/ Get API key

CVE-2013-1962

The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5...

5.0 MediumFix available

The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of requests "to list all volumes for the particular pool."

Exploit likelihood

3.51%Down 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of requests "to list all volumes for the particular pool."

Record
CVE-2013-1962
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of requests "to list all volumes for the particular pool."

Record
CVE-2013-1962
Updated
2026-11-02
EUVDEUVD-2013-1952 No score

The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of requests "to list all volumes for the particular pool."

Record
EUVD-2013-1952
Updated
2026-11-03
GitHub AdvisoriesGHSA-6vm5-9cgm-26rc No score

The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5...

The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of requests "to list all volumes for the particular pool."

Record
GHSA-6vm5-9cgm-26rc
Updated
2026-11-02
OSVMGASA-2013-0166 No score

Updated libvirt packages fix security vulnerability

It was found that libvirtd leaked file descriptors when listing all volumes for a particular pool. A remote attacker able to establish a read-only connection to libvirtd could use this flaw to cause libvirtd to consume all available file descriptors, preventing other users from using libvirtd services (such as starting a new guest) until libvirtd is restarted (CVE-2013-1962).

Record
MGASA-2013-0166
Updated
2026-11-02
OSVopenSUSE-SU-2024:10209-1 No score

libvirt-2.5.0-1.1 on GA media

These are all security issues fixed in the libvirt-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10209-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libvirt
Mageia:3
 before 1.0.2-8.1.mga3
1.0.2-8.1.mga3
libvirt
Red Hat:enterprise_linux:6::client
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-client
Red Hat:enterprise_linux:6::client
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-python
Red Hat:enterprise_linux:6::client
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-devel
Red Hat:enterprise_linux:6::client
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-lock-sanlock
Red Hat:enterprise_linux:6::client
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt
Red Hat:enterprise_linux:6::computenode
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-client
Red Hat:enterprise_linux:6::computenode
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
Show 16 moreShow less
Affected packages
PackageAffectedFixed
libvirt-python
Red Hat:enterprise_linux:6::computenode
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-devel
Red Hat:enterprise_linux:6::computenode
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-lock-sanlock
Red Hat:enterprise_linux:6::computenode
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt
Red Hat:enterprise_linux:6::server
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-client
Red Hat:enterprise_linux:6::server
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-devel
Red Hat:enterprise_linux:6::server
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-python
Red Hat:enterprise_linux:6::server
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-lock-sanlock
Red Hat:enterprise_linux:6::server
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt
Red Hat:enterprise_linux:6::workstation
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-client
Red Hat:enterprise_linux:6::workstation
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-devel
Red Hat:enterprise_linux:6::workstation
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-python
Red Hat:enterprise_linux:6::workstation
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt-lock-sanlock
Red Hat:enterprise_linux:6::workstation
 before 0:0.10.2-18.el6_4.5
0:0.10.2-18.el6_4.5
libvirt
openSUSE:Tumbleweed
From an advisory covering 32 CVEs
 before 2.5.0-1.1
2.5.0-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-1962 is a medium vulnerability (CVSS 5.0) in Redhat Libvirt, published May 29, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.51%, the 89th percentile. Fixed in libvirt 1.0.2-8.1.mga3.

References

Show 53 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open