libvirt Excessive Memory Allocation Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in libvirt's XML file processing. The issue arises because user-provided XML files are parsed before access control checks are applied. This flaw can be exploited by a malicious user with limited permissions who submits a specially crafted XML file. The result is excessive memory consumption on the host, which can cause a libvirt process crash, creating a denial-of-service condition.

Impact

Exploitation of this vulnerability leads to excessive memory consumption, causing a libvirt process crash on the host and resulting in a denial-of-service condition.