PT-2020-10467 · Libvirt +6 · Libvirt +6

Name of the Vulnerable Software and Affected Versions: libvirt versions prior to 6.0.0 Description: The issue is related to the mishandling of the holding of a monitor job during a query to a guest agent in the qemu/qemu driver.c file. This allows attackers to cause a denial of service, resulting...

libvirt: virsh domhostname command discloses guest hostname in readonly mode

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block...

CVE-2018-1064

An incomplete fix for CVE-2018-5748 that affects QEMU monitor leading to a resource exhaustion but now also triggered via QEMU guest agent...

CentOS Update for qemu-guest-agent CESA-2019:2892 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : qemu-kvm (EulerOS-SA-2019-1988)

According to the versions of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in the pxa2xxsspload function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or...

CentOS Update for qemu-guest-agent CESA-2019:1650 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

QEMU integer overflow vulnerability (CNVD-2019-15553)

QEMU is a set of simulation processors written by Fabrice Bellard and distributed with source code under the GPL license, widely used on the GNU/Linux platform. An integer overflow vulnerability exists in QEMU 3.0.0. The vulnerability stems from the qga/commands.c file not checking the length of...

CentOS Update for qemu-guest-agent CESA-2019:1181 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.1.0 : libvirt (EulerOS-SA-2019-1394)

According to the versions of the libvirt packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest ...

openSUSE Security Update : libvirt (openSUSE-2019-1288)

This update for libvirt provides the following fixes : Security issue fixed : - CVE-2019-3840: Fixed a NULL pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent bsc1127458. Other issues addressed : -...

CVE-2016-10746

CVE-2016-10746 affects libvirt before 1.3.1: libvirt-domain.c allows virDomainGetTime API calls by guest agents over an RO connection when an RW connection was required. Root cause is a permission/connection type mismatch enabling information disclosure or potential denial of service. Remediation...

CVE-2019-3886

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block...

DEBIAN-CVE-2019-3886

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block...

Information disclosure

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block...

CVE-2019-3886

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block...

CVE-2019-3886

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block...

openSUSE Security Update : qemu (openSUSE-2019-426) (Spectre)

This update for qemu fixes the following issues : This security issue was fixed : - CVE-2018-3639: Spectre v4 vulnerability mitigation support for KVM guests bsc1092885. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of...

Microsoft Releases Security Update for Azure Linux Guest Agent

Microsoft has released an update to address a vulnerability in Azure Linux Guest Agent. An attacker could exploit this vulnerability to obtain access to sensitive information. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the Microsoft...

Denial Of Service (DoS)

libvirt.so is vulnerable to denial of service. A NULL pointer dereference in the virJSONValueObjectHasKey function in util/virjson.c allows a remote attacker to crash the process via a malicious guest agent...

PT-2019-12715 · Qemu +2 · Qemu +2

Name of the Vulnerable Software and Affected Versions: QEMU version 3.0.0 Description: The issue is related to an Integer Overflow in QEMU 3.0.0, caused by the qga/commands.c files not checking the length of the argument list or the number of environment variables. However, it has been disputed a...