CVE-2013-6457
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt...
CVE-2013-6457 is a medium vulnerability (CVSS 5.2) in Redhat Libvirt, published January 24, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.66%, the 52nd percentile. Fixed in libvirt 1.2.1-1.
- Severity
- 5.2 MediumCVSS 2.0, NVD
- Exploit chance
- 0.66%EPSS, 52nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.2.1-1libvirt +3 more
Description
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
- Record
CVE-2013-6457- CVSS 2.0
- 5.2 Medium
AV:A/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
- Record
CVE-2013-6457- Updated
- 2026-11-02
EUVDEUVD-2013-6264No score
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
- Record
EUVD-2013-6264- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cw6x-8qwh-8q47No score
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt...
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
- Record
GHSA-cw6x-8qwh-8q47- Updated
- 2026-11-02
OSVNo score
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
- Record
CVE-2013-6457- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-6457No score
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
- Record
DEBIAN-CVE-2013-6457- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10209-1No score
libvirt-2.5.0-1.1 on GA media
These are all security issues fixed in the libvirt-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10209-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
ubuntu.com/usn/USN-2093-1
libvirt.org/news.html
secunia.com/advisories/60895
security.gentoo.org/glsa/glsa-201412-04.xml
lists.opensuse.org/opensuse-updates/2014-02/msg00060.html
redhat.com/archives/libvir-list/2013-December/msg01176.html
Show 37 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=1048629
nvd.nist.gov/vuln/detail/CVE-2013-6457
github.com/advisories/GHSA-cw6x-8qwh-8q47
security-tracker.debian.org/tracker/CVE-2013-6457
suse.com/security/cve/CVE-2010-2242