Every CVESearch/Get API key

CVE-2014-8131

The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly...

4.0 MediumFix available

The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.

Exploit likelihood

1.46%Up 0.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used4.0

The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.

Record
CVE-2014-8131
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Weakness
CWE-264
Updated
2026-11-02
CVE ListNo score

The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.

Record
CVE-2014-8131
Updated
2026-11-02
EUVDEUVD-2014-7974No score

The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.

Record
EUVD-2014-7974
Updated
2026-11-03
GitHub AdvisoriesGHSA-7rwv-h43r-x9q6No score

The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly...

The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.

Record
GHSA-7rwv-h43r-x9q6
Updated
2026-11-02
OSVNo score

The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.

Record
CVE-2014-8131
Updated
2026-11-02
OSVDEBIAN-CVE-2014-8131No score

The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.

Record
DEBIAN-CVE-2014-8131
Updated
2026-11-02
OSVopenSUSE-SU-2024:10209-1No score

libvirt-2.5.0-1.1 on GA media

These are all security issues fixed in the libvirt-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10209-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libvirt
Debian:12
before 1.2.9-7
1.2.9-7
libvirt
Debian:13
before 1.2.9-7
1.2.9-7
libvirt
Debian:14
before 1.2.9-7
1.2.9-7
libvirt
openSUSE:Tumbleweed
From an advisory covering 32 CVEs
before 2.5.0-1.1
2.5.0-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-8131 is a medium vulnerability (CVSS 4.0) in Redhat Libvirt, published January 6, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.46%, the 73rd percentile. Fixed in libvirt 1.2.9-7.

References

Show 31 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open