CVE-2014-1447

low
Published 2014-01-24 · Modified 2026-04-29
CVSS v3
CVSS v2
3.3
VIR risk
3.3

Description

Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a connection before a keepalive response is sent.

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2014-1447

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — https://bugzilla.redhat.com/show_bug.cgi?id=1047577

OS impact

OSVersionStatusFixed in
debian debianbookwormfixed1.2.1-1
debian debianbullseyefixed1.2.1-1
debian debianforkyfixed1.2.1-1
debian debiansidfixed1.2.1-1
debian debiantrixiefixed1.2.1-1

Application impact

VendorProductVersionsFixed
redhat redhatlibvirt{"endIncluding":"1.2.0"}
redhat redhatlibvirt0.0.1
redhat redhatlibvirt0.0.2
redhat redhatlibvirt0.0.3
redhat redhatlibvirt0.0.4
redhat redhatlibvirt0.0.5
redhat redhatlibvirt0.0.6
redhat redhatlibvirt0.1.0
redhat redhatlibvirt0.1.1
redhat redhatlibvirt0.1.3
redhat redhatlibvirt0.1.4
redhat redhatlibvirt0.1.5
redhat redhatlibvirt0.1.6
redhat redhatlibvirt0.1.7
redhat redhatlibvirt0.1.8
redhat redhatlibvirt0.1.9
redhat redhatlibvirt0.2.0
redhat redhatlibvirt0.2.1
redhat redhatlibvirt0.2.2
redhat redhatlibvirt0.2.3
redhat redhatlibvirt0.3.0
redhat redhatlibvirt0.3.1
redhat redhatlibvirt0.3.2
redhat redhatlibvirt0.3.3
redhat redhatlibvirt0.4.0
redhat redhatlibvirt0.4.1
redhat redhatlibvirt0.4.2
redhat redhatlibvirt0.4.3
redhat redhatlibvirt0.4.4
redhat redhatlibvirt0.4.5
redhat redhatlibvirt0.4.6
redhat redhatlibvirt0.5.0
redhat redhatlibvirt0.5.1
redhat redhatlibvirt0.6.0
redhat redhatlibvirt0.6.1
redhat redhatlibvirt0.6.2
redhat redhatlibvirt0.6.3
redhat redhatlibvirt0.6.4
redhat redhatlibvirt0.6.5
redhat redhatlibvirt0.7.0
redhat redhatlibvirt0.7.1
redhat redhatlibvirt0.7.2
redhat redhatlibvirt0.7.3
redhat redhatlibvirt0.7.4
redhat redhatlibvirt0.7.5
redhat redhatlibvirt0.7.6
redhat redhatlibvirt0.7.7
redhat redhatlibvirt0.8.0
redhat redhatlibvirt0.8.1
redhat redhatlibvirt0.8.2
redhat redhatlibvirt0.8.3
redhat redhatlibvirt0.8.4
redhat redhatlibvirt0.8.5
redhat redhatlibvirt0.8.6
redhat redhatlibvirt0.8.7
redhat redhatlibvirt0.8.8
redhat redhatlibvirt0.9.0
redhat redhatlibvirt0.9.1
redhat redhatlibvirt0.9.2
redhat redhatlibvirt0.9.3
redhat redhatlibvirt0.9.4
redhat redhatlibvirt0.9.5
redhat redhatlibvirt0.9.6
redhat redhatlibvirt0.9.6.1
redhat redhatlibvirt0.9.6.2
redhat redhatlibvirt0.9.6.3
redhat redhatlibvirt0.9.7
redhat redhatlibvirt0.9.8
redhat redhatlibvirt0.9.9
redhat redhatlibvirt0.9.10
redhat redhatlibvirt0.9.11
redhat redhatlibvirt0.9.11.1
redhat redhatlibvirt0.9.11.2
redhat redhatlibvirt0.9.11.3
redhat redhatlibvirt0.9.11.4
redhat redhatlibvirt0.9.11.5
redhat redhatlibvirt0.9.11.6
redhat redhatlibvirt0.9.11.7
redhat redhatlibvirt0.9.11.8
redhat redhatlibvirt0.9.12
redhat redhatlibvirt0.9.13
redhat redhatlibvirt0.10.0
redhat redhatlibvirt0.10.1
redhat redhatlibvirt0.10.2
redhat redhatlibvirt0.10.2.1
redhat redhatlibvirt0.10.2.2
redhat redhatlibvirt0.10.2.3
redhat redhatlibvirt0.10.2.4
redhat redhatlibvirt0.10.2.5
redhat redhatlibvirt0.10.2.6
redhat redhatlibvirt0.10.2.7
redhat redhatlibvirt0.10.2.8
redhat redhatlibvirt1.0.0
redhat redhatlibvirt1.0.1
redhat redhatlibvirt1.0.2
redhat redhatlibvirt1.0.3
redhat redhatlibvirt1.0.4
redhat redhatlibvirt1.0.5
redhat redhatlibvirt1.0.5.1
redhat redhatlibvirt1.0.5.2
redhat redhatlibvirt1.0.5.3
redhat redhatlibvirt1.0.5.4
redhat redhatlibvirt1.0.5.5
redhat redhatlibvirt1.0.5.6
redhat redhatlibvirt1.0.6
redhat redhatlibvirt1.1.0
redhat redhatlibvirt1.1.1
redhat redhatlibvirt1.1.2
redhat redhatlibvirt1.1.3
redhat redhatlibvirt1.1.4

References

CWEs

CWE-362

Verify integrity in audit chain (admin only). AS-IS.