{"id":"CVE-2013-6458","aliases":["DEBIAN-CVE-2013-6458","DSA-2846-1","EUVD-2013-6265","GHSA-9hqh-qqff-45p6","MGASA-2014-0051","RHSA-2014:0103","openSUSE-SU-2024:10209-1"],"status":"published","title":"Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3)...","description":"Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.","severity":{"version":"2.0","score":6.8,"vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00593,"percentile":0.48604,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-362"],"published":"2014-01-17T00:00:00Z","modified":"2026-09-01T20:03:19Z","fixes":[{"ecosystem":"Debian:12","package":"libvirt","fixed_in":["1.2.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libvirt","fixed_in":["1.2.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libvirt","fixed_in":["1.2.1-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12.3-1"}]}],"versions":["0.9.12-11","0.9.12-11+deb7u1","0.9.12-11+deb7u3","0.9.12-11+deb7u4"],"bundled":2},{"source":"osv","ecosystem":"Mageia:3","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-8.4.mga3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-29.el6_5.3"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.1"}]}],"bundled":32}],"products":[{"vendor":"redhat","product":"libvirt"}],"references":[{"url":"http://www.ubuntu.com/usn/USN-2093-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/56446","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.debian.org/security/2014/dsa-2846","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1043069","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://libvirt.org/news.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/60895","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201412-04.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-02/msg00060.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0103.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/56186","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-02/msg00062.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6458","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9hqh-qqff-45p6"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-6458","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0051.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12235","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0103","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1048631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1052957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1055578","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0103.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-6458","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6458","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1447","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1447","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1447","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5313","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-6458","description":"Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.","status":"published","published":"2014-01-24T18:00:00Z","modified":"2024-08-06T17:39:01.171Z","updated_at":"2026-11-02T14:34:57.195423Z"}],"euvd":[{"id":"EUVD-2013-6265","description":"Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.","status":"published","published":"2014-01-24T18:00:00Z","modified":"2024-08-06T17:39:01Z","updated_at":"2026-11-03T01:56:26.306678Z"}],"ghsa":[{"id":"GHSA-9hqh-qqff-45p6","title":"Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3)...","description":"Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.","status":"published","published":"2022-05-17T04:18:15Z","modified":"2023-01-28T05:01:31Z","cwes":["CWE-362"],"updated_at":"2026-11-02T14:43:34.628173Z"}],"nvd":[{"id":"CVE-2013-6458","description":"Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.","status":"published","published":"2014-01-24T18:55:04.823Z","modified":"2026-06-17T00:00:31.957Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:02:48.062712Z"}],"osv":[{"id":"CVE-2013-6458","description":"Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.","status":"published","published":"2014-01-24T18:55:04Z","modified":"2026-04-16T06:18:58.872572444Z","updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2013-6458","description":"Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.","status":"published","published":"2014-01-24T18:55:04.823Z","modified":"2026-09-01T20:03:19.05826963Z","updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"DSA-2846-1","title":"libvirt - several","status":"published","published":"2014-01-17T00:00:00Z","modified":"2026-03-09T01:18:15.739437Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2014-0051","title":"Updated libvirt packages fix two vulnerabilties","description":"Updated libvirt packages fix security vulnerabilities:\n\nIt was discovered that insecure job usage could lead to denial of service\nagainst libvirtd (CVE-2013-6458).\n\nIt was discovered that a race condition in keepalive handling could lead to\ndenial of service against libvirtd (CVE-2014-1447).\n","status":"published","published":"2014-02-11T22:06:14Z","modified":"2026-04-16T06:23:33.877670533Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"openSUSE-SU-2024:10209-1","title":"libvirt-2.5.0-1.1 on GA media","description":"These are all security issues fixed in the libvirt-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:34:02.434926Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2014:0103","title":"Red Hat Security Advisory: libvirt security and bug fix update","status":"published","published":"2024-09-15T21:19:59Z","modified":"2026-06-28T10:09:28Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}