TI-2019-02852 CVE-2019-3840 · GHSA-rx4m-pcxc-jchp
NULL pointer dereference in libvirt
Priority LOW 31
A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent.
RHSA-2019:2294
libvirt security, bug fix, and enhancement update
Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libvirt-4.5.0-23.el7, libvirt-bash-completion-4.5.0-23.el7, libvirt-client-4.5.0-23.el7 +21
- Red Hat Enterprise Linux Client Optional (v. 7) libvirt-admin-4.5.0-23.el7, libvirt-daemon-lxc-4.5.0-23.el7, libvirt-devel-4.5.0-23.el7 +4
- Red Hat Enterprise Linux ComputeNode (v. 7) libvirt-4.5.0-23.el7, libvirt-bash-completion-4.5.0-23.el7, libvirt-client-4.5.0-23.el7 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libvirt-4.5.0-23.el7, libvirt-admin-4.5.0-23.el7, libvirt-daemon-4.5.0-23.el7 +25
- Red Hat Enterprise Linux Server (v. 7) libvirt-4.5.0-23.el7, libvirt-bash-completion-4.5.0-23.el7, libvirt-client-4.5.0-23.el7 +26
- Red Hat Enterprise Linux Server Optional (v. 7) libvirt-admin-4.5.0-23.el7, libvirt-daemon-lxc-4.5.0-23.el7, libvirt-lock-sanlock-4.5.0-23.el7 +3
- Red Hat Enterprise Linux Workstation (v. 7) libvirt-4.5.0-23.el7, libvirt-bash-completion-4.5.0-23.el7, libvirt-client-4.5.0-23.el7 +23
- Red Hat Enterprise Linux Workstation Optional (v. 7) libvirt-admin-4.5.0-23.el7, libvirt-daemon-lxc-4.5.0-23.el7, libvirt-lock-sanlock-4.5.0-23.el7 +2