libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service (host OS crash) or possibly execute arbitrary code via a (1) virNodeDeviceDettach, (2) virNodeDeviceReset, (3) virDomainRevertToSnapshot, (4) virDomainSnapshotDelete, (5) virNodeDeviceReAttach, or (6) virConnectDomainXMLToNative call, a different vulnerability than CVE-2008-5086.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libvirt | Redhat | 0.8.8 (including) | 0.8.8 (including) |
| Red Hat Enterprise Linux 5 | RedHat | libvirt-0:0.8.2-15.el5_6.3 | * |
| Red Hat Enterprise Linux 6 | RedHat | libvirt-0:0.8.1-27.el6_0.5 | * |
| Libvirt | Ubuntu | devel | * |
| Libvirt | Ubuntu | karmic | * |
| Libvirt | Ubuntu | lucid | * |
| Libvirt | Ubuntu | maverick | * |
| Libvirt | Ubuntu | upstream | * |