CVE-2009-0036 - CVE House
Back to Database
Status published Medium CVE-2009-0036

Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy...

Vulnerability Description

Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sending the remainder of the packet with crafted values in the header, related to use of uninitialized memory in a validation check.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-0036

Credits & Attribution

No credits recorded in the NVD database.

References

More from libvirt

View All →
CVE-2020-10703
A NULL pointer dereference was found in the libvirt API...
Medium 6.5
CVE-2019-10168
The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and...
High 8.8
CVE-2019-10167
The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x...
High 8.8
CVE-2019-10166
It was discovered that libvirtd, versions 4.x.x before 4.10.1 and...
High 7.8
CVE-2019-10132
A vulnerability was found in libvirt >= 4.1.0 in the...
High 8.8

Affected Vendor

Affected Software

libvirt
Vulnerable Versions:
0.5.1

Timeline

Official Publish: February 11th, 2009
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.