Red Hat Security AdvisoryRHSA-2018:1929
libvirt security update
Released 2018-06-19 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libvirt-0.10.2-64.el6, libvirt-client-0.10.2-64.el6, libvirt-python-0.10.2-64.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) libvirt-devel-0.10.2-64.el6, libvirt-lock-sanlock-0.10.2-64.el6
- Red Hat Enterprise Linux HPC Node (v. 6) libvirt-0.10.2-64.el6, libvirt-client-0.10.2-64.el6, libvirt-python-0.10.2-64.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libvirt-devel-0.10.2-64.el6, libvirt-lock-sanlock-0.10.2-64.el6
- Red Hat Enterprise Linux Server (v. 6) libvirt-0.10.2-64.el6, libvirt-client-0.10.2-64.el6, libvirt-client-0.10.2-64.el6.ppc +3
- Red Hat Enterprise Linux Server Optional (v. 6) libvirt-lock-sanlock-0.10.2-64.el6
- Red Hat Enterprise Linux Workstation (v. 6) libvirt-0.10.2-64.el6, libvirt-client-0.10.2-64.el6, libvirt-devel-0.10.2-64.el6 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) libvirt-lock-sanlock-0.10.2-64.el6
- Red Hat Storage Server 3 libvirt-lock-sanlock-0.10.2-64.el6
Fixes 2 records
Priority LOW 39
qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03175 · Published 2018-01-25 · Fixed CWE-400
Priority LOW 38
libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02855 · Published 2018-03-28 · Fixed in 4.2.0-rc1 CWE-400
