6 matches found
libvirt: Resource exhaustion via qemuMonitorIORead() method
qemu/qemumonitor.c in libvirt allows attackers to cause a denial of service memory consumption via a large QEMU reply...
USN-3576-1 libvirt vulnerabilities
Vivian Zhang and Christoph Anton Mitterer discovered that libvirt incorrectly disabled password authentication when the VNC password was set to an empty string. A remote attacker could possibly use this issue to bypass authentication, contrary to expectations. This issue only affected Ubuntu 14.0...
Design/Logic Flaw
qemu/qemumonitor.c in libvirt allows attackers to cause a denial of service memory consumption via a large QEMU reply...
CVE-2018-5748
qemu/qemumonitor.c in libvirt allows attackers to cause a denial of service memory consumption via a large QEMU reply...
