CVE-2011-1486
libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote...
libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service (crash) by causing multiple threads to report errors at the same time.
Exploit likelihood
What each source reports
NVD Score used
libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service (crash) by causing multiple threads to report errors at the same time.
- Record
CVE-2011-1486- CVSS 2.0
- 3.3 Low
AV:A/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service (crash) by causing multiple threads to report errors at the same time.
- Record
CVE-2011-1486- Updated
- 2026-11-02
EUVDEUVD-2011-1489 No score
libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service (crash) by causing multiple threads to report errors at the same time.
- Record
EUVD-2011-1489- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wmfm-p2jq-55wv No score
libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote...
libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service (crash) by causing multiple threads to report errors at the same time.
- Record
GHSA-wmfm-p2jq-55wv- Updated
- 2026-11-02
OSV No score
libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service (crash) by causing multiple threads to report errors at the same time.
- Record
CVE-2011-1486- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-1486 No score
libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service (crash) by causing multiple threads to report errors at the same time.
- Record
DEBIAN-CVE-2011-1486- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libvirtDebian:12 |
before 0.9.0-1 | 0.9.0-1 |
libvirtDebian:13 |
before 0.9.0-1 | 0.9.0-1 |
libvirtDebian:14 |
before 0.9.0-1 | 0.9.0-1 |
libvirtDebian:6.0 From an advisory covering 2 CVEs |
before 0.8.3-5+squeeze2, plus listed versions 0.8.3-50.8.3-5+squeeze00.8.3-5+squeeze10.8.3-5+squeeze1~bpo50+10.8.3-5+squeeze2~bpo50+2 |
0.8.3-5+squeeze2 |
libvirtDebian:5.0 From an advisory covering 2 CVEs |
before 0.4.6-10+lenny2, plus listed versions 0.4.6-100.4.6-10+lenny1 |
0.4.6-10+lenny2 |
libvirtRed Hat:rhel_virtualization:5::server |
before 0:0.8.2-15.el5_6.4 | 0:0.8.2-15.el5_6.4 |
libvirt-debuginfoRed Hat:rhel_virtualization:5::server |
before 0:0.8.2-15.el5_6.4 | 0:0.8.2-15.el5_6.4 |
libvirt-develRed Hat:rhel_virtualization:5::server |
before 0:0.8.2-15.el5_6.4 | 0:0.8.2-15.el5_6.4 |
libvirt-pythonRed Hat:rhel_virtualization:5::server |
before 0:0.8.2-15.el5_6.4 | 0:0.8.2-15.el5_6.4 |
libvirtRed Hat:enterprise_linux:6::client |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
Show 19 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libvirt-debuginfoRed Hat:enterprise_linux:6::client |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirt-develRed Hat:enterprise_linux:6::client |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirt-clientRed Hat:enterprise_linux:6::client |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirt-pythonRed Hat:enterprise_linux:6::client |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirtRed Hat:enterprise_linux:6::computenode |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirt-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirt-develRed Hat:enterprise_linux:6::computenode |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirt-clientRed Hat:enterprise_linux:6::computenode |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirt-pythonRed Hat:enterprise_linux:6::computenode |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirtRed Hat:enterprise_linux:6::server |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirt-clientRed Hat:enterprise_linux:6::server |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirt-debuginfoRed Hat:enterprise_linux:6::server |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirt-develRed Hat:enterprise_linux:6::server |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirt-pythonRed Hat:enterprise_linux:6::server |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirtRed Hat:enterprise_linux:6::workstation |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirt-clientRed Hat:enterprise_linux:6::workstation |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirt-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirt-develRed Hat:enterprise_linux:6::workstation |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
libvirt-pythonRed Hat:enterprise_linux:6::workstation |
before 0:0.8.1-27.el6_0.6 | 0:0.8.1-27.el6_0.6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1486 is a low vulnerability (CVSS 3.3) in Redhat Libvirt, published May 31, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.20%, the 68th percentile. Fixed in libvirt 0.9.0-1.
References
support.avaya.com/css/P8/documents/100134583
secunia.com/advisories/44459
redhat.com/support/errata/RHSA-2011-0479.html
libvirt.org/git?p=libvirt.git%3Ba=commit%3Bh=f44bfb7fb978c9313ce050a1c4149bf04aa0a670
securitytracker.com/id?1025477
securityfocus.com/bid/47148
Show 17 moreShow less
ubuntu.com/usn/USN-1152-1
bugzilla.redhat.com/show_bug.cgi?id=693391
debian.org/security/2011/dsa-2280
nvd.nist.gov/vuln/detail/CVE-2011-1486
github.com/advisories/GHSA-wmfm-p2jq-55wv
security-tracker.debian.org/tracker/CVE-2011-1486
access.redhat.com/errata/RHSA-2011:0478
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0478.json
cve.org/CVERecord?id=CVE-2011-1486