Lucene search
GoogleOSV:CVE-2019-20485HistoryMar 19, 2020 - 2:15 a.m.
CVE-2019-20485
2020-03-1902:15:10
Google
osv.dev
19
EPSS
0.196
Percentile
96.4%
qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, which allows attackers to cause a denial of service (API blockage).
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=953078
bugzilla.redhat.com/show_bug.cgi?id=1809740
libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=a663a860819287e041c3de672aad1d8543098ecc
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D5GE6ISYUL3CIWO3FQRUGMKTKP2NYED2/
security-tracker.debian.org/tracker/CVE-2019-20485
www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1730509.html
Related
osv
osv
nessus
nessus
GLSA-201412-04 : libvirt: Multiple vulnerabilities
2014-12-09 00:00:00
Fedora 20 : libvirt-1.1.3.3-1.fc20 (2014-1042)
2014-01-21 00:00:00
Ubuntu 12.04 LTS / 12.10 / 13.10 : libvirt vulnerabilities (USN-2093-1)
2014-01-31 00:00:00
gentoo
gentoo
libvirt: Multiple vulnerabilities
2014-12-08 00:00:00
libvirt: Denial of service
2014-12-24 00:00:00
libvirt: Multiple vulnerabilities
2012-02-27 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201412-04
2015-09-29 00:00:00
Fedora Update for libvirt FEDORA-2014-1090
2014-01-27 00:00:00
Fedora Update for libvirt FEDORA-2014-1090
2014-01-27 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: libvirt-1.0.5.9-1.fc19
2014-01-26 11:54:32
[SECURITY] Fedora 20 Update: libvirt-1.1.3.9-1.fc20
2015-02-17 08:10:35
[SECURITY] Fedora 20 Update: libvirt-1.1.3.3-1.fc20
2014-01-21 05:56:08
f5
f5
SOL16117 - Multiple libvirt vulnerabilities
2015-02-12 00:00:00
K16117 : Multiple libvirt vulnerabilities
2015-02-12 00:00:00
oraclelinux
oraclelinux
libvirt security, bug fix, and enhancement update
2015-03-11 00:00:00
libvirt security and bug fix update
2014-11-18 00:00:00
libvirt security and bug fix update
2013-09-19 00:00:00
ubuntu
ubuntu
libvirt vulnerabilities
2014-01-30 00:00:00
libvirt vulnerabilities
2016-01-12 00:00:00
libvirt vulnerabilities
2013-09-18 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package libvirt version 1.2.11-alt1
2014-12-18 00:00:00
Security fix for the ALT Linux 8 package libvirt version 1.2.2-alt1
2014-03-05 00:00:00
Security fix for the ALT Linux 8 package libvirt version 1.1.2-alt1
2013-09-03 00:00:00
mageia
mageia
Updated libvirt package fixes security vulnerabilities
2013-10-05 21:55:44
Updated libvirt packages fix security vulnerbilities
2014-10-07 13:22:51
redhat
redhat
(RHSA-2014:1873) Moderate: libvirt security and bug fix update
2014-11-18 00:00:00
(RHSA-2013:1272) Important: libvirt security and bug fix update
2013-09-19 00:00:00
(RHSA-2015:0323) Low: libvirt security, bug fix, and enhancement update
2015-03-05 00:00:00
centos
centos
libvirt security update
2014-11-18 18:46:17
libvirt security update
2013-09-20 02:24:43
libvirt security update
2015-03-17 13:28:58
securityvulns
securityvulns
[USN-1708-1] libvirt vulnerabilities
2013-02-04 00:00:00
libvirt DoS vulnerabilities
2013-02-04 00:00:00
libvirt memory corruption
2013-10-02 00:00:00
suse
suse
libvirt to fix use-after-free in virNetMessageFree() (important)
2013-02-12 10:04:34
veracode
veracode
Privilege Escalation
2019-05-02 04:52:27
ibm
ibm
debian
debian
[SECURITY] [DSA 3038-1] libvirt security update
2014-09-27 15:52:33
[SECURITY] [DSA 2846-1] libvirt security update
2014-01-17 19:25:28