CVE-2009-0036

Publication date 11 February 2009

Last updated 24 July 2024

Ubuntu priority

Negligible

Why this priority?

Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sending the remainder of the packet with crafted values in the header, related to use of uninitialized memory in a validation check.

Read the notes from the security team

Status

Package Ubuntu Release Status
libvirt 10.04 LTS lucid
Not affected
9.10 karmic
Not affected
9.04 jaunty
Not affected
8.10 intrepid Ignored end of life, was needed
8.04 LTS hardy
Not affected
7.10 gutsy Ignored end of life, was needed
6.06 LTS dapper Not in release

Notes

jdstrand

code exists but is not compiled on Ubuntu