CVE-2013-5651: The virBitmapParse function in util/virbitmap.c in libvirt before 1.1.2 allows context-dependent attackers...

Security readout for executives and security teams

CVE-2013-5651 is a libvirt denial-of-service flaw. A specially crafted bitmap value could make libvirt read outside expected memory and crash. The source bundle identifies libvirt before 1.1.2 and cites numatune nodeset handling as the demonstrated path. Exposure is most likely on virtualization hosts or management stacks running libvirt before 1.1.2, especially where less-trusted users or automation can create or modify domain configuration involving NUMA tuning. The bundle does not provide affected CPEs or platform-specific version ranges. Treat this as a stability risk for older virtualization infrastructure. Prioritize remediation where libvirt is exposed to tenant, developer, or automation-driven configuration changes. Systems already running fixed vendor packages are lower concern. Mitigation focus: Upgrade libvirt to 1.1.2 or a vendor-fixed package.; Review Ubuntu, Gentoo, openSUSE, or platform vendor advisories for backported fixes.; Restrict who can create or modify libvirt domain NUMA configuration..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.