CVE-2009-0036

Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sending the remainder of the packet with crafted values in the header, related to use of uninitialized memory in a validation check.

CVSS v2.0

4.4 MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P

EPSS

1.17% chance of exploitation in the next 30 days, 65th percentile

Published

2009-02-11

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/8534

References

• CVE Record
• NVD entry

Related

• CVE-2009-0028
• CVE-2009-0037
• CVE-2009-0026
• CVE-2009-0038
• CVE-2009-0039
• CVE-2009-0043