USN-3923-1: QEMU vulnerabilities

Michael Hanselmann discovered that QEMU incorrectly handled the Media Transfer Protocol MTP. An attacker inside the guest could use this issue to read or write arbitrary files and cause a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.10. CVE-2018-16867...

openSUSE Security Update : qemu (openSUSE-2019-683)

This update for qemu fixes the following issues : This security issue was fixed : - CVE-2018-12617: qmpguestfileread had an integer overflow that could have been exploited by sending a crafted QMP command including guest-file-read with a large count value to the agent via the listening socket...

openSUSE Security Update : libvirt (openSUSE-2019-424) (Spectre)

This update for libvirt fixes the following issues : This update fixes the following security issue : - Added support for 'ssbd' and 'virt-ssbd' CPUID feature bits CVE-2018-3639, boo1092885 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Ubuntu 16.04 LTS / 18.04 LTS : libvirt vulnerability (USN-3909-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3909-1 advisory. It was discovered that libvirt incorrectly handled waiting for certain agent events. An attacker inside a guest could possibly use this issue to cause...

Ubuntu: Security Advisory (USN-3909-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3909-1: libvirt vulnerability

It was discovered that libvirt incorrectly handled waiting for certain agent events. An attacker inside a guest could possibly use this issue to cause libvirtd to stop responding, resulting in a denial of service...

USN-3909-1 libvirt vulnerability

It was discovered that libvirt incorrectly handled waiting for certain agent events. An attacker inside a guest could possibly use this issue to cause libvirtd to stop responding, resulting in a denial of service...

Denial Of Service (DoS)

libvirt.so is vulnerable to denial of service. A NULL pointer dereference in the virJSONValueObjectHasKey function in util/virjson.c allows a remote attacker to crash the process via a malicious guest agent...

The vulnerability of the libvirt virtualization management package in the Astra Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the libvirt virtualization management package in the Astra Linux operating system is related to the incorrect assignment of token labels to external file storage systems with integrity control tokens enabled. Exploiting this vulnerability could allow an attacker to cause a...

UBUNTU-CVE-2019-3840

A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service...

CVE-2019-3840

A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service...

CVE-2019-3840

A NULL pointer dereference flaw was discovered in libvirt in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service...

Photon OS 2.0: Libvirt PHSA-2018-2.0-0039

An update of the libvirt package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0039. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Libvirt PHSA-2018-1.0-0129

An update of the libvirt package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0129. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

The vulnerability of the Libvirt virtualization management library, related to a bug that leads to excessive memory consumption, allows a hacker to trigger a service failure.

The vulnerability of the Libvirt virtualization management library is related to an error that causes excessive memory consumption when processing large data streams by QEMU. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Arbitrary Code Execution

libvirt is vulnerable to arbitrary code execution. Local gust OS users are able to bypass container protection mechanisms to inject and execute code via libnssdns.so loaded by libvirtlxc before init...

Denial Of Service (DoS)

libvirt is vulnerable to denial of service DoS attacks. The vulnerability exists as libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent...

Information Disclosure

libvirt is vulnerable to information disclosure attacks. The vulnerability exists as libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device aka RBD, which allows local users to obtain sensitive information via a process listing...

Arbitrary File Read

openstack-nova is vulnerable to arbitrary file read attacks. The vulnerability exists as the libvirt driver in OpenStack Compute Nova before 2015.1.4 kilo and 12.0.x before 12.0.3 liberty, when using raw storage and usecowimages is set to false, allows remote authenticated users to read arbitrary...

Arbitrary File Read

openstack-nova is vulnerable to arbitrary file read. A flaw was discovered in the OpenStack Compute nova snapshot feature when using the libvirt driver. A compute user could overwrite an attached instance disk with a malicious header specifying a backing file, and then request a snapshot, causing...