]> git.ipfire.org Git - thirdparty/libvirt.git/commit
nwfilter: fix crash when counting number of network filters
authorDaniel P. Berrangé <berrange@redhat.com>
Tue, 8 Mar 2022 17:28:38 +0000 (17:28 +0000)
committerDaniel P. Berrangé <berrange@redhat.com>
Thu, 17 Mar 2022 11:32:07 +0000 (11:32 +0000)
commita4947e8f63c3e6b7b067b444f3d6cf674c0d7f36
tree88f35e882e963945c178af3fbe22931344c2f0fd
parent92e00c7afca556414a072cdcf84cb2aaac0df506
nwfilter: fix crash when counting number of network filters

The virNWFilterObjListNumOfNWFilters method iterates over the
driver->nwfilters, accessing virNWFilterObj instances. As such
it needs to be protected against concurrent modification of
the driver->nwfilters object.

This API allows unprivileged users to connect, so users with
read-only access to libvirt can cause a denial of service
crash if they are able to race with a call of virNWFilterUndefine.
Since network filters are usually statically defined, this is
considered a low severity problem.

This is assigned CVE-2022-0897.

Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
src/nwfilter/nwfilter_driver.c