{"id":"UBUNTU-CVE-2013-2124","details":"Double free vulnerability in inspect-fs.c in LibguestFS 1.20.x before 1.20.7, 1.21.x, 1.22.0, and 1.23.0 allows remote attackers to cause a denial of service (crash) via empty guest files.","modified":"2025-07-16T07:31:14.674825Z","published":"2014-05-27T14:55:00Z","withdrawn":"2025-07-18T16:42:51Z","upstream":["CVE-2013-2124"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2013-2124"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2013-2124"}],"affected":[{"package":{"name":"libguestfs","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/libguestfs@1:1.32.2-4ubuntu2.2?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.32.2-4ubuntu2.2"}]}],"versions":["1:1.28.12-1ubuntu2","1:1.28.12-1ubuntu3","1:1.30.6-1ubuntu1","1:1.30.6-1ubuntu2","1:1.32.2-3ubuntu1","1:1.32.2-4ubuntu1","1:1.32.2-4ubuntu2"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"erlang-guestfs","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"erlang-guestfs-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"gir1.2-guestfs-1.0","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"gir1.2-guestfs-1.0-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"golang-guestfs-dev","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"guestfsd","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_version":"1:1.32.2-4ubuntu2.2","binary_name":"guestfsd-dbgsym"},{"binary_name":"libguestfs-dev","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-dev-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-gfs2","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-gfs2-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-gobject-1.0-0","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-gobject-1.0-0-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_version":"1:1.32.2-4ubuntu2.2","binary_name":"libguestfs-gobject-dev"},{"binary_name":"libguestfs-gobject-dev-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-hfsplus","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-hfsplus-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-java","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-java-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-jfs","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-jfs-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-nilfs","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-nilfs-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-ocaml","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-ocaml-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-ocaml-dev","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-ocaml-dev-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-perl","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-perl-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-reiserfs","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-reiserfs-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-rescue","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-rescue-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-rsync","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-rsync-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-tools","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-tools-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-xfs","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-xfs-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-zfs","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-zfs-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs0","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs0-dbg","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs0-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_version":"1:1.32.2-4ubuntu2.2","binary_name":"lua-guestfs"},{"binary_version":"1:1.32.2-4ubuntu2.2","binary_name":"lua-guestfs-dbgsym"},{"binary_name":"python-guestfs","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"python3-guestfs","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"ruby-guestfs","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"ruby-guestfs-dbgsym","binary_version":"1:1.32.2-4ubuntu2.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-2124.json"}}],"schema_version":"1.7.3","severity":[{"type":"Ubuntu","score":"medium"}]}