CVE-2013-4292: libvirt 1.1.0 and 1.1.1 allows local users to cause a denial of service (memory consumption) via a large nu...

Security readout for executives and security teams

This issue lets a local user make affected libvirt hosts consume excessive memory, potentially disrupting virtualization management or hosted workloads. It is not described as remote code execution. Business urgency depends on whether untrusted users can access libvirt locally or through management tooling. Exposure is most likely on virtualization hosts running libvirt 1.1.0 or 1.1.1, especially where local users or delegated operators can interact with libvirt management functions. The bundle does not identify additional affected products, CPEs, or downstream package ranges. Prioritize remediation on shared virtualization infrastructure or systems with untrusted local users. For isolated hosts with only trusted administrators, urgency is lower, but patching remains appropriate because denial of service can affect availability. Mitigation focus: Identify hosts running libvirt 1.1.0 or 1.1.1.; Upgrade libvirt using vendor-supported packages or official vendor guidance.; Restrict local and delegated libvirt management access to trusted administrators..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.