You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve 2023 3750
About this tag
CVE-2023-3750 is a security vulnerability in libvirt, the open-source virtualization management library and daemon. The flaw resides in the virStoragePoolObjListSearch function, where a race condition can leave the caller with an unlocked object. This allows a remote or local attacker to crash the libvirt daemon, resulting in a denial-of-service condition. The vulnerability affects systems using libvirt for virtualization management, including those integrated with orchestration tools like virt-install, virt-manager, and cloud stacks. Users should apply patches or updates from their distribution to mitigate the risk.
A small change in libvirt’s storage lookup code left a surprising attack surface: a race in the function virStoragePoolObjListSearch that can leave the caller with an unlocked object and allow a remote or local actor to force the libvirt daemon to crash, producing a denial‑of‑service condition...