CVE-2013-4296: Canonical Ubuntu Linux

Medium severity, CVSS 4.0. EPSS: 2.7% chance of exploitation in the next 30 days.

The remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x, 0.10.2.x before 0.10.2.8, 1.0.x before 1.0.5.6, and 1.1.x before 1.1.2 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and crash) via a crafted RPC call.

Affected products

• Canonical Ubuntu Linux: version 10.04 only; version 12.04 only; version 12.10 only; version 13.04 only
• Red Hat Enterprise Linux: version 6.0 only
• Red Hat Libvirt: version 0.9.1 only; version 0.9.2 only; version 0.9.3 only; version 0.9.4 only; version 0.9.5 only; version 0.9.6 only; …

Published 2013-09-30. Last modified 2026-06-16.