libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read block and hang) via a crafted XML document containing an XML external entity declaration in conjunction with an entity reference to the (1) virConnectCompareCPU or (2) virConnectBaselineCPU API method, related to an XML External Entity (XXE) issue. NOTE: this issue was SPLIT per ADT3 due to different affected versions of some vectors. CVE-2014-5177 is used for other API methods.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2014-08-03T18:00:00
Updated: 2014-12-12T13:57:01
Reserved: 2013-12-03T00:00:00
Link: CVE-2014-0179
JSON object: View
NVD Information
Status : Modified
Published: 2014-08-03T18:55:05.630
Modified: 2023-11-07T02:18:11.183
Link: CVE-2014-0179
JSON object: View
Redhat Information
No data.
CWE