CVE-2013-0170

Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6 before 0.9.6.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering certain errors during an RPC connection, which causes a message to be freed without being removed from the message queue.

• CWE-416

• http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=46532e3e8ed5f5a736a02f67d6c805492f9ca720
• http://libvirt.org/news.htmlRelease Notes, Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098326.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098370.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098398.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00001.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00002.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00016.htmlMailing List, Third Party Advisory
• http://osvdb.org/89644Broken Link
• http://rhn.redhat.com/errata/RHSA-2013-0199.htmlThird Party Advisory
• http://secunia.com/advisories/52001Third Party Advisory
• http://secunia.com/advisories/52003Third Party Advisory
• http://wiki.libvirt.org/page/Maintenance_ReleasesRelease Notes, Vendor Advisory
• http://www.securityfocus.com/bid/57578Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1028047Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1708-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=893450Issue Tracking, Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81552Third Party Advisory, VDB Entry
• http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=46532e3e8ed5f5a736a02f67d6c805492f9ca720
• http://libvirt.org/news.htmlRelease Notes, Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098326.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098370.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098398.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00001.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00002.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00016.htmlMailing List, Third Party Advisory
• http://osvdb.org/89644Broken Link
• http://rhn.redhat.com/errata/RHSA-2013-0199.htmlThird Party Advisory
• http://secunia.com/advisories/52001Third Party Advisory
• http://secunia.com/advisories/52003Third Party Advisory
• http://wiki.libvirt.org/page/Maintenance_ReleasesRelease Notes, Vendor Advisory
• http://www.securityfocus.com/bid/57578Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1028047Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1708-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=893450Issue Tracking, Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81552Third Party Advisory, VDB Entry

Published

Feb 8, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-0164The lockwrap function in port-proxy/bin/openshift-port-proxy…
• CVE-2013-0165cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/d…7.3
• CVE-2013-0166OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before…
• CVE-2013-0167VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows p…
• CVE-2013-0168The MoveDisk command in Red Hat Enterprise Virtualization Ma…
• CVE-2013-0169The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1…
• CVE-2013-0171Foreman before 1.1 allows remote attackers to execute arbitr…
• CVE-2013-0172Samba 4.0.x before 4.0.1, in certain Active Directory domain…
• CVE-2013-0173Foreman before 1.1 uses a salt of "foreman" to hash root pas…
• CVE-2013-0174The external node classifier (ENC) API in Foreman before 1.1…
• CVE-2013-0175multi_xml gem 0.5.2 for Ruby, as used in Grape before 0.2.6 …
• CVE-2013-0176The publickey_from_privatekey function in libssh before 0.5.…