Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2017-2635 Details

Description

A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could use this flaw to crash libvirtd daemon resulting in denial of service.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2635 CVEIssue Tracking
https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=c3de387380f6057ee0e46cd9f2f0a092e8070875 CVE
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2635 [email protected]Issue Tracking
https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=c3de387380f6057ee0e46cd9f2f0a092e8070875 [email protected]

Weakness Enumeration

CWE-IDCWE NameSource
CWE-476NULL Pointer Dereference[email protected]
CWE-476NULL Pointer Dereference[email protected]

Affected Products

ProductVersions
redhat libvirt
>= 2.5.0, <= 3.0.0

CPE

  • cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2017-2635
NVD Published Date:
Aug 22, 2018
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2017-2635 Details - Not Deferred