A security issue and a vulnerability have been reported in libvirt, which can be exploited by malicious people to bypass certain security restrictions and cause a DoS (Denial of Service).

1) The libvirt "virNodeDeviceDettach()", "virNodeDeviceReset()", "virDomainRevertToSnapshot()", and "virDomainSnapshotDelete()" API calls are not properly enforcing read-only connections, which can be exploited to e.g. crash the host server.

2) The error reporting mechanism in libvirtd is not thread safe, which can be exploited to cause a crash by triggering errors in multiple threads at the same time.

Solution
Update to version 0.9.0.

Provided and/or discovered by
Red Hat

Changelog
Further details available to Secunia VIM customers

Original Advisory
libvirt:
http://www.libvirt.org/news.html

Red Hat:
https://bugzilla.redhat.com/show_bug.cgi?id=683650
https://bugzilla.redhat.com/show_bug.cgi?id=693391

Deep Links
Links available to Secunia VIM customers