qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-lock-sanlockUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-develUpgrade libvirt-daemon-config-networkUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-libsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-kvmUpgrade libvirt-docsUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-clientUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-logical | Apr 27, 2020 | Jan 25, 2018 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-login-shellUpgrade libvirt-adminUpgrade libvirt-clientUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemonUpgrade libvirt-develUpgrade libvirt-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-pythonUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-docsUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storageUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-iscsi | Jun 1, 2018 | Jan 25, 2018 |
| Debian | — | Upgrade libvirt | Mar 17, 2018 | Jan 25, 2018 |
| Gentoo Linux | — | Upgrade app-emulation/qemu.Upgrade app-emulation/libvirt. | Apr 9, 2018 | Jan 25, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clientUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemonUpgrade libvirtUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage | Dec 4, 2019 | Jan 25, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libvirt-daemon-driver-nodedevUpgrade libvirt-clientUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon | Jul 3, 2018 | Jan 25, 2018 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storageUpgrade libvirt-libsUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemonUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-secretUpgrade libvirt-develUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-config-networkUpgrade libvirt-adminUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-docsUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-pythonUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-login-shellUpgrade libvirt-clientUpgrade libvirtUpgrade libvirt-daemon-driver-storage-core | May 15, 2018 | Jan 16, 2018 |
| Redhat_linux | — | Upgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-libsUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-develUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-config-networkUpgrade libvirt-adminUpgrade libvirtUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-pythonUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-clientUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-debuginfoUpgrade libvirt-login-shellUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-docsUpgrade libvirt-daemon-driver-qemu | May 15, 2018 | Jan 25, 2018 |
| Suse | — | Upgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-develUpgrade libvirt-libsUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-docUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storageUpgrade libvirt-adminUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-networkUpgrade libvirt-clientUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirtUpgrade libvirt-daemon-config-networkUpgrade libvirt-bash-completionUpgrade libvirt-client-32bitUpgrade libvirt-pythonUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon | Jan 31, 2018 | Jan 25, 2018 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-bin | Feb 21, 2018 | Jan 25, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub