CVE-2014-8131

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 1.2.11

Description The issue arises from the qemu implementation of virConnectGetAllDomainStats in libvirt, which fails to handle locks correctly when a domain is skipped due to ACL restrictions. This allows remote authenticated users to cause a denial of service, resulting in a deadlock or segmentation fault and crash, by making a request to access domains they do not have privileges to access.

Recommendations For versions prior to 1.2.11, update to version 1.2.11 or later to resolve the issue.