CVE-2019-20485

Опубликовано: 19 мар. 2020

Источник: nvd

CVSS3: 5.7

CVSS2: 2.7

EPSS Низкий

Описание

qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, which allows attackers to cause a denial of service (API blockage).

Ссылки

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=953078
Issue Tracking
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1809740
Issue Tracking
Vendor Advisory
https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=a663a860819287e041c3de672aad1d8543098ecc
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D5GE6ISYUL3CIWO3FQRUGMKTKP2NYED2/
https://security-tracker.debian.org/tracker/CVE-2019-20485
Third Party Advisory
https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1730509.html
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=953078
Issue Tracking
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1809740
Issue Tracking
Vendor Advisory
https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=a663a860819287e041c3de672aad1d8543098ecc
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D5GE6ISYUL3CIWO3FQRUGMKTKP2NYED2/
https://security-tracker.debian.org/tracker/CVE-2019-20485
Third Party Advisory
https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1730509.html

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*

Версия до 6.0.0 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.00203

Низкий

5.7 Medium

CVSS3

2.7 Low

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2019-20485

CVSS3: 5.7

ubuntu

больше 5 лет назад

qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, which allows attackers to cause a denial of service (API blockage).

CVE-2019-20485

CVSS3: 5.8

redhat

больше 5 лет назад

qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, which allows attackers to cause a denial of service (API blockage).

CVE-2019-20485

CVSS3: 5.7

debian

больше 5 лет назад

qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a ...

GHSA-9283-64xm-984q

CVSS3: 5.7

github

около 3 лет назад

qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, which allows attackers to cause a denial of service (API blockage).

ELSA-2020-5674

oracle-oval

больше 5 лет назад

ELSA-2020-5674: libvirt security update (IMPORTANT)

EPSS

Процентиль: 43%

0.00203

Низкий

5.7 Medium

CVSS3

2.7 Low

CVSS2

Дефекты

CWE-20