CVE-2013-7336: Opensuse

Low severity, CVSS 1.9. EPSS: 0.3% chance of exploitation in the next 30 days.

The qemuMigrationWaitForSpice function in qemu/qemu_migration.c in libvirt before 1.1.3 does not properly enter a monitor when performing seamless SPICE migration, which allows local users to cause a denial of service (NULL pointer dereference and libvirtd crash) by causing domblkstat to be called at the same time as the qemuMonitorGetSpiceMigrationStatus function.

Affected products

• Opensuse Opensuse: version 13.1 only
• Red Hat Libvirt: up to and including 1.1.2; version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; …

Published 2014-05-07. Last modified 2026-06-17.