CVE-2013-6457

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 1.2.1

Description The issue is related to the libxlDomainGetNumaParameters function in the libxl driver, which does not properly initialize the nodemap. This can be exploited by local users to cause a denial of service, resulting in an invalid free operation and crash, or potentially execute arbitrary code. The exploitation is possible via an inactive domain to the virsh numatune command.

Recommendations For versions prior to 1.2.1, update to version 1.2.1 or later to resolve the issue.