CVE-2014-8131

CVE-2014-8131 describes a denial-of-service vulnerability in libvirt before version 1.2.11, specifically within its qemu implementation of virConnectGetAllDomainStats, affecting Red Hat libvirt products. This flaw arises from improper lock handling when ACL restrictions prevent access to a domain. A remote authenticated user can trigger a deadlock or segmentation fault and crash by requesting access to domains they lack privileges for. With a CVSS score of 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P), it is a low-severity vulnerability, requiring authentication and having a low attack complexity, primarily leading to availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low exploitation risk.