CVE-2012-3445: The virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain* API calls wi...

Security readout for executives and security teams

CVE-2012-3445 is a denial-of-service issue in libvirt 0.9.13. An authenticated remote user could send an RPC request that crashes libvirtd, disrupting virtualization management. The provided sources do not show data theft, privilege escalation, or unauthenticated exploitation. Exposure is most likely on systems running affected libvirt packages with remote libvirt management enabled for authenticated users. The bundle names libvirt 0.9.13 but provides incomplete product/version metadata, so package-level vendor advisories should drive final scoping. Prioritize remediation where libvirt manages production virtualization hosts or is reachable over a network. Business impact is service disruption to virtualization management, with no source-backed evidence of active exploitation or compromise beyond denial of service. Mitigation focus: Apply vendor libvirt updates referencing CVE-2012-3445, including Red Hat or SUSE advisories where applicable.; Check current vendor guidance if running libvirt packages not covered by the cited advisories.; Restrict remote libvirt access to trusted administrators and management networks..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.