libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service (host OS crash) or possibly execute arbitrary code via a (1) virNodeDeviceDettach, (2) virNodeDeviceReset, (3) virDomainRevertToSnapshot, (4) virDomainSnapshotDelete, (5) virNodeDeviceReAttach, or (6) virConnectDomainXMLToNative call, a different vulnerability than CVE-2008-5086.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2011-03-15T17:00:00

Updated: 2024-08-06T22:14:27.939Z

Reserved: 2011-03-03T00:00:00

Link: CVE-2011-1146

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-03-15T17:55:05.263

Modified: 2024-11-21T01:25:39.653

Link: CVE-2011-1146

cve-icon Redhat

Severity : Important

Publid Date: 2011-03-02T00:00:00Z

Links: CVE-2011-1146 - Bugzilla