Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2014-7823

The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML_SECURE flag.

Related bugs and status

CVE-2014-7823 (Candidate) is related to these bugs:

Bug #1374554: ppc64el virsh start fails

		In	Importance	Status
1374554	ppc64el virsh start fails	libvirt (Ubuntu)	High	Fix Released
1374554	ppc64el virsh start fails	libvirt (Ubuntu Vivid)	High	Fix Released
1374554	ppc64el virsh start fails	libvirt (Ubuntu Utopic)	High	Fix Released
1374554	ppc64el virsh start fails	libvirt (Ubuntu Trusty)	High	Fix Released

Bug #1387251: apparmor conflict with precise cloud archive

Summary				In	Importance	Status
	1387251	apparmor conflict with precise cloud archive		libvirt (Ubuntu)	Critical	Fix Released
	1387251	apparmor conflict with precise cloud archive		Ubuntu Cloud Archive	Critical	Fix Released

See the

CVE page on Mitre.org for more details.

References

MISC: http://secunia.com/adv...
MISC: http://secunia.com/adv...
MISC: http://secunia.com/adv...
MISC: http://secunia.com/adv...
MISC: http://security.gentoo...
MISC: http://www.ubuntu.com/...
MISC: http://security.libvir...
MISC: http://lists.opensuse....