CVE-2014-8131
The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly...
CVE-2014-8131 is a medium vulnerability (CVSS 4.0) in Redhat Libvirt, published January 6, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.46%, the 73rd percentile. Fixed in libvirt 1.2.9-7.
The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.
Exploit likelihood
What each source reports
NVD Score used
The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.
- Record
CVE-2014-8131- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.
- Record
CVE-2014-8131- Updated
- 2026-11-02
EUVDEUVD-2014-7974 No score
The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.
- Record
EUVD-2014-7974- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7rwv-h43r-x9q6 No score
The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly...
The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.
- Record
GHSA-7rwv-h43r-x9q6- Updated
- 2026-11-02
OSV No score
The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.
- Record
CVE-2014-8131- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-8131 No score
The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.
- Record
DEBIAN-CVE-2014-8131- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10209-1 No score
libvirt-2.5.0-1.1 on GA media
These are all security issues fixed in the libvirt-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10209-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
security.libvirt.org/2014/0008.html
lists.opensuse.org/opensuse-updates/2015-01/msg00005.html
nvd.nist.gov/vuln/detail/CVE-2014-8131
github.com/advisories/GHSA-7rwv-h43r-x9q6
security-tracker.debian.org/tracker/CVE-2014-8131
suse.com/security/cve/CVE-2010-2242
Show 31 moreShow less