Photon OS 1.0: Libvirt PHSA-2018-1.0-0129

An update of the libvirt package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0129. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

The vulnerability of the Libvirt virtualization management library, related to a bug that leads to excessive memory consumption, allows a hacker to trigger a service failure.

The vulnerability of the Libvirt virtualization management library is related to an error that causes excessive memory consumption when processing large data streams by QEMU. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Arbitrary Code Execution

libvirt is vulnerable to arbitrary code execution. Local gust OS users are able to bypass container protection mechanisms to inject and execute code via libnssdns.so loaded by libvirtlxc before init...

Denial Of Service (DoS)

libvirt is vulnerable to denial of service DoS attacks. The vulnerability exists as libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent...

Information Disclosure

libvirt is vulnerable to information disclosure attacks. The vulnerability exists as libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device aka RBD, which allows local users to obtain sensitive information via a process listing...

Arbitrary File Read

openstack-nova is vulnerable to arbitrary file read attacks. The vulnerability exists as the libvirt driver in OpenStack Compute Nova before 2015.1.4 kilo and 12.0.x before 12.0.3 liberty, when using raw storage and usecowimages is set to false, allows remote authenticated users to read arbitrary...

Arbitrary File Read

openstack-nova is vulnerable to arbitrary file read. A flaw was discovered in the OpenStack Compute nova snapshot feature when using the libvirt driver. A compute user could overwrite an attached instance disk with a malicious header specifying a backing file, and then request a snapshot, causing...

Out-Of-Bounds Read

libvirt.so is vulnerable to an out-of-bounds read. An attacker will be able to cause a denial of service condition or read sensitive heap information using a crafted blkiotune query when a disk is hot-plugged to the live definition. The qemuDomainGetBlockIoTune function in qemu/qemudriver.c...

Denial Of Service (DoS)

libvirt is vulnerable to denial of service DoS attacks. The vulnerability exists as the virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and segmentation fault via an RPC call with 1 an event as the RPC...

Denial Of Service (DoS)

libvirt is vulnerable to denial of service DoS attacks. The vulnerability exists as Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service traffic amplification via a spoof...

Denial Of Service (DoS)

libvirt is vulnerable to denial of service DoS attacks. The vulnerability exists as the virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain API calls with typed parameters, which might allow remote authenticated users to cause a denial of service libvirtd cra...

Information Disclosure

openstack-nova is vulnerable to information disclosure. When using libvirt and LVM backed instances, the contents of the physical volume PV are not properly wiped before the volume is returned to the system for use again, which could lead to the new instance being able to access confidential file...

Information Disclosure

openstack-nova is vulnerable to information disclosure attacks. The vulnerability exists in the instance rescue mode in OpenStack Compute Nova 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and usecowimages is set to false, allows remote authenticated users ...

Unauthorized Access

libvirt is vulnerable to unauthorized access attacks. The vulnerability exists as libvirt does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local user...

Denial Of Service (DoS)

libvirt is vulnerable to denial of service DoS attacks. The vulnerability exists through the qemuMigrationWaitForSpice function in qemu/qemumigration.c in libvirt before 1.1.3 that does not properly enter a monitor when performing seamless SPICE migration, which allows local users to cause a deni...

Denial Of Service (DoS)

libvirt is vulnerable to denial of service. When parsing XML documents using the libxml2 library, libvirt passes the XMLPARSENOENT flag and all XML entities in the parsed documents are expanded. This allows an attacker to parse an XML document which references a special file that blocks read acce...

Authorization Bypass

libvirt is vulnerable to authorization bypass attacks. The vulnerability exists as the networkReloadIptablesRules function of network/bridgedriver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to...

Fedora 28 : libvirt (2018-527698a904) (Spectre)

Add new CPU features for speculative store bypass CVE-2018-3639 On Intel x86 hosts, the 'ssbd' feature must be explicitly added to any virtual machines that are not using host-passthrough/host-model CPU setup. NB this requires new microcode too, which is not yet available in Fedora microcodectl...

Amazon Linux 2 : libvirt (ALAS-2018-1134)

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.CVE-2018-6764 C Tenable Network Security, Inc. The descriptive...

Medium: libvirt

Issue Overview: util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.CVE-2018-6764 Affected Packages: libvirt Note:...