CVE-2013-6457
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt...
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
Exploit likelihood
What each source reports
NVD Score used
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
- Record
CVE-2013-6457- CVSS 2.0
- 5.2 Medium
AV:A/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
- Record
CVE-2013-6457- Updated
- 2026-11-02
EUVDEUVD-2013-6264 No score
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
- Record
EUVD-2013-6264- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cw6x-8qwh-8q47 No score
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt...
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
- Record
GHSA-cw6x-8qwh-8q47- Updated
- 2026-11-02
OSV No score
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
- Record
CVE-2013-6457- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-6457 No score
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
- Record
DEBIAN-CVE-2013-6457- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10209-1 No score
libvirt-2.5.0-1.1 on GA media
These are all security issues fixed in the libvirt-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10209-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-6457 is a medium vulnerability (CVSS 5.2) in Redhat Libvirt, published January 24, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.66%, the 51st percentile. Fixed in libvirt 1.2.1-1.
References
ubuntu.com/usn/USN-2093-1
libvirt.org/news.html
secunia.com/advisories/60895
security.gentoo.org/glsa/glsa-201412-04.xml
lists.opensuse.org/opensuse-updates/2014-02/msg00060.html
redhat.com/archives/libvir-list/2013-December/msg01176.html
Show 37 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=1048629
nvd.nist.gov/vuln/detail/CVE-2013-6457
github.com/advisories/GHSA-cw6x-8qwh-8q47
security-tracker.debian.org/tracker/CVE-2013-6457
suse.com/security/cve/CVE-2010-2242