Libvirt Heap Buffer Overflow DoS

The vulnerability of the virJSONValueObjectHasKey function in the Libvirt virtualization management library arises from the assignment of a null pointer. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

SUSE SLED15 / SLES15 Security Update : libvirt (SUSE-SU-2019:0936-1)

This update for libvirt provides the following fixes : Security issue fixed : CVE-2019-3840: Fixed a NULL pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent bsc1127458. Other issues addressed: apparmor...

PT-2019-2029

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 5.0.0 Description A NULL pointer dereference flaw was discovered in the way libvirt gets interface information through the QEMU agent. This issue can be exploited by an attacker in a guest VM to crash libvirtd, causin...