A use-after-free flaw was found in... CVE-2021-3975
-
AV
AC
AU
C
I
A
发布：
2022-08-23
修订：
2024-04-01
A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有15条受影响产品信息
