libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libvirt-develUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemonUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-adminUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-nodedevUpgrade libvirtUpgrade libvirt-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-docsUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secret | Apr 27, 2020 | Mar 28, 2018 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-lock-sanlockUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-networkUpgrade libvirt-pythonUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-docsUpgrade libvirtUpgrade libvirt-nssUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-secretUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-develUpgrade libvirt-clientUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-lxc | Jun 1, 2018 | Mar 14, 2018 |
| Debian | — | Upgrade libvirt | Mar 17, 2018 | Mar 14, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libvirt-daemon-driver-nodedevUpgrade libvirtUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-kvmUpgrade libvirt-daemonUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage | Dec 4, 2019 | Mar 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-kvmUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nodedevUpgrade libvirtUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-network | Jul 3, 2018 | Mar 28, 2018 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-adminUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-docsUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clientUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-pythonUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-develUpgrade libvirt-daemon-driver-secretUpgrade libvirtUpgrade libvirt-daemon-driver-lxc | May 15, 2018 | Mar 14, 2018 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-docsUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-pythonUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-lock-sanlockUpgrade libvirt-develUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-nssUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirtUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-network | May 15, 2018 | Mar 14, 2018 |
| Suse | — | suse-upgrade-libvirtsuse-upgrade-libvirt-adminsuse-upgrade-libvirt-bash-completionsuse-upgrade-libvirt-clientsuse-upgrade-libvirt-client-32bitsuse-upgrade-libvirt-daemonsuse-upgrade-libvirt-daemon-config-networksuse-upgrade-libvirt-daemon-config-nwfiltersuse-upgrade-libvirt-daemon-driver-interfacesuse-upgrade-libvirt-daemon-driver-libxlsuse-upgrade-libvirt-daemon-driver-lxcsuse-upgrade-libvirt-daemon-driver-networksuse-upgrade-libvirt-daemon-driver-nodedevsuse-upgrade-libvirt-daemon-driver-nwfiltersuse-upgrade-libvirt-daemon-driver-qemususe-upgrade-libvirt-daemon-driver-secretsuse-upgrade-libvirt-daemon-driver-storagesuse-upgrade-libvirt-daemon-driver-storage-coresuse-upgrade-libvirt-daemon-driver-storage-disksuse-upgrade-libvirt-daemon-driver-storage-iscsisuse-upgrade-libvirt-daemon-driver-storage-iscsi-directsuse-upgrade-libvirt-daemon-driver-storage-logicalsuse-upgrade-libvirt-daemon-driver-storage-mpathsuse-upgrade-libvirt-daemon-driver-storage-rbdsuse-upgrade-libvirt-daemon-driver-storage-scsisuse-upgrade-libvirt-daemon-hookssuse-upgrade-libvirt-daemon-lxcsuse-upgrade-libvirt-daemon-qemususe-upgrade-libvirt-daemon-xensuse-upgrade-libvirt-develsuse-upgrade-libvirt-devel-32bitsuse-upgrade-libvirt-docsuse-upgrade-libvirt-libssuse-upgrade-libvirt-lock-sanlocksuse-upgrade-libvirt-nsssuse-upgrade-libvirt-pythonsuse-upgrade-virt-installsuse-upgrade-virt-managersuse-upgrade-virt-manager-common | Mar 30, 2018 | Mar 14, 2018 |
| Ubuntu | ubuntu-upgrade-libvirt-binubuntu-upgrade-libvirt0 | Jun 16, 2018 | Mar 14, 2018 | |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub