NetworkDaemon segfault triggerable via DBus call

Description

The dom0 service 'networkdaemon' can be triggered to segfault by issuing a particular DBus call with unreasonable (but syntactically valid) parameters. Noticed when attempting to signal NDVM status with mismatched UUID and DomID (not sure why the method takes both instead of taking one and performing a lookup of the other). From base rpc-proxy rules, this would allow such a call to be made from an NDVM, leading to a network DoS for the system (except PCI Passthrough NICs). Cannot be triggered by generic guests.

Environment

None

Validation Steps

None

Assignee

Unassigned

Reporter

Kevin Pearson

Labels

None

QA Assignee

None

QA Image URL

None

Components

Fix versions

Priority

Critical
Configure