CVE-2014-3672

MEDIUM 6.5CVE-2014-3672 · Published 25/05/2016 · updated 17/06/2026

In short

CVE-2014-3672 is a MEDIUM (CVSS 6.5) vulnerability affecting libvirt (redhat).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 42.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
libvirt redhat	`≤ 1.2.21`	No fix yet

Description

The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout or stderr.

References

openwall.com/lists/oss-security/2016/05/24/5 · Mailing List
oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html · Third Party Advisory
securitytracker.com/id/1035945 · Third Party Advisory
xenbits.xen.org/xsa/advisory-180.html · Vendor Advisory
libvirt.org/git
libvirt.org/news-2015.html · Release Notes

More vulnerabilities in libvirt

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

libvirt

redhat

≤ 1.2.21

No fix yet

More vulnerabilities in libvirt

See all →