vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2013-0170

N/A
Published: February 8, 2013 at 08:00 PM UTC
Updated: June 16, 2026 at 11:48 PM UTC
11 products affected across 5 vendorsFedoraUbuntu LinuxEnterprise Linux Desktop

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 6%

Description

Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6 before 0.9.6.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering certain errors during an RPC connection, which causes a message to be freed without being removed from the message queue.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux· Canonicalrubygems
95%
12.0412.10
Fedora· Fedora Projectrpm
95%
161718
openSUSE· openSUSE
95%
12.112.2
Enterprise Linux Desktop· Red Hatrubygems
95%
6.0
Enterprise Linux Eus· Red Hatrpm
95%
6.3
Enterprise Linux Server· Red Hatrubygems
95%
6.0
Enterprise Linux Workstation· Red Hatrubygems
95%
6.0
Libvirt· Red Hat
95%
0.10.2 ≤ v < 0.10.2.30.9.11 ≤ v < 0.9.11.90.9.6 ≤ v < 0.9.6.41.0.0 ≤ v < 1.0.2
Affected range stops below 0.10.2.3, so it looks safe — our inference, not a vendor statement
Affected range stops below 0.9.11.9, so it looks safe — our inference, not a vendor statement
Affected range stops below 0.9.6.4, so it looks safe — our inference, not a vendor statement
Affected range stops below 1.0.2, so it looks safe — our inference, not a vendor statement
Linux Enterprise Desktop· SUSE
95%
11 sp2
Linux Enterprise Server· SUSE
95%
11 sp2

References (18)

x_refsource_CONFIRM
Source: [email protected]
http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=46532e3e8ed5f5a736a02f67d6c805492f9ca720
x_refsource_CONFIRMRelease NotesVendor Advisory
Source: [email protected]
http://libvirt.org/news.html
Vendor Advisoryx_refsource_FEDORAThird Party Advisory
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098326.html
Vendor Advisoryx_refsource_FEDORAThird Party Advisory
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098370.html
Vendor Advisoryx_refsource_FEDORAThird Party Advisory
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098398.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00001.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00002.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00016.html

CVSS

6.8MEDIUM[email protected]
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-416

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card