CVE-2013-4153: Double free vulnerability in the qemuAgentGetVCPUs function in qemu/qemu_agent.c in libvirt 1.0.6 through 1...

Security readout for executives and security teams

This libvirt flaw can crash the virtualization management daemon when a guest CPU-count request reaches affected code. The business impact is availability: virtual machine management operations may be disrupted, but the provided sources do not show data theft, privilege escalation, or active exploitation. Likely exposure is limited to environments running libvirt 1.0.6 through 1.1.0 with affected QEMU guest-agent CPU-count handling reachable through libvirt management access. The source bundle does not define authentication requirements or distribution-specific affected packages. Prioritize remediation for virtualization hosts where management availability is operationally important. This is not presented as a data breach issue, but daemon crashes can disrupt VM administration and incident response. Mitigation focus: Check whether deployed libvirt versions are 1.0.6 through 1.1.0.; Apply vendor-supported libvirt updates that include the upstream fix.; Review Red Hat or distribution advisories for package-specific remediation..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.