CVE-2009-0036: libvirt

Vulnerability summary

CVE-2009-0036 is a medium (CVSS 4.4) vulnerability in libvirt. EPSS estimates a 1.17% chance of exploitation in the next 30 days, higher than 67.5% of scored vulnerabilities. 4 public exploits are recorded.

Timeline

1. 11-02-2009
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sending the remainder of the packet with crafted values in the header, related to use of uninitialized memory in a validation check.

• CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.