VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 30, 2013· Updated Jun 16, 2026

CVE-2013-4154

CVE-2013-4154

Description

The qemuAgentCommand function in libvirt before 1.1.1, when a guest agent is not configured, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to "agent based cpu (un)plug," as demonstrated by the "virsh vcpucount foobar --guest" command.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Red Hat/Libvirt8 versions
    cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*range: <=1.1.0
    • cpe:2.3:a:redhat:libvirt:1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libvirt:1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libvirt:1.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libvirt:1.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libvirt:1.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libvirt:1.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libvirt:1.0.6:*:*:*:*:*:*:*
  • Libvirt/Libvirtllm-fuzzy
    Range: <1.1.1
  • osv-coords
    pkg:rpm/opensuse/libvirt&distro=openSUSE%20Tumbleweed
    Range: < 2.5.0-1.1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.