{"cve":"CVE-2014-0179","nvd":{"published":"2014-08-03T18:55:05.630","modified":"2026-06-17T00:02:26.910","status":"Modified","description":"libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read block and hang) via a crafted XML document containing an XML external entity declaration in conjunction with an entity reference to the (1) virConnectCompareCPU or (2) virConnectBaselineCPU API method, related to an XML External Entity (XXE) issue.  NOTE: this issue was SPLIT per ADT3 due to different affected versions of some vectors. CVE-2014-5177 is used for other API methods.","cvss_v4":null,"cvss_v3":null,"cwes":["CWE-20"],"references":["http://libvirt.org/news.html","http://lists.opensuse.org/opensuse-updates/2014-05/msg00048.html","http://lists.opensuse.org/opensuse-updates/2014-05/msg00052.html","http://rhn.redhat.com/errata/RHSA-2014-0560.html","http://secunia.com/advisories/60895"],"products":["opensuse:opensuse","redhat:enterprise_linux","redhat:enterprise_virtualization","redhat:libvirt"],"source":"nvd","synced_at":"2026-10-19T20:33:06.232976534+00:00"},"epss":{"cve":"CVE-2014-0179","score":0.0056,"percentile":0.46603,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}