CVE-2013-0241

Name of the Vulnerable Software and Affected Versions QXL Virtual GPU version 0.1.0 xorg-x11-drv-qxl version 0.0.14 xorg-x11-drv-qxl-debuginfo version 0.0.14

Description The issue allows local users to cause a denial of service, potentially leading to a guest crash or hang, via a SPICE connection that prevents other threads from obtaining the qemu mutex mutex. This can be exploited locally, leading to a disruption in the availability of protected information.

Recommendations For QXL Virtual GPU version 0.1.0, consider disabling the SPICE connection as a temporary workaround to prevent exploitation. For xorg-x11-drv-qxl version 0.0.14 and xorg-x11-drv-qxl-debuginfo version 0.0.14, restrict local access to minimize the risk of exploitation until a patch is available.