Unrated severityNVD Advisory· Published Jan 6, 2015· Updated Jun 17, 2026

CVE-2014-8131

Description

The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/Libvirt
cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*
Range: <=1.2.10
Libvirt/Libvirtllm-fuzzy
Range: <1.2.11
osv-coords
pkg:rpm/opensuse/libvirt&distro=openSUSE%20Tumbleweed
Range: < 2.5.0-1.1

Patches

Vulnerability mechanics

References

security.libvirt.org/2014/0008.htmlnvdVendor Advisory
lists.opensuse.org/opensuse-updates/2015-01/msg00005.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000