Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-3840

Опубликовано: 27 мар. 2019
Источник: nvd
CVSS3: 5.8
CVSS3: 6.3
CVSS2: 3.5
EPSS Низкий

Описание

A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*
Версия до 5.0.0 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*

EPSS

Процентиль: 72%
0.00737
Низкий

5.8 Medium

CVSS3

6.3 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-476
CWE-476

Связанные уязвимости

CVSS3: 5.8
ubuntu
почти 7 лет назад

A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.

CVSS3: 5.8
redhat
около 7 лет назад

A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.

CVSS3: 5.8
debian
почти 7 лет назад

A NULL pointer dereference flaw was discovered in libvirt before versi ...

suse-cvrf
почти 7 лет назад

Security update for libvirt

suse-cvrf
почти 7 лет назад

Security update for libvirt

EPSS

Процентиль: 72%
0.00737
Низкий

5.8 Medium

CVSS3

6.3 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-476
CWE-476