Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2019-3840

Опубликовано: 10 янв. 2019
Источник: redhat
CVSS3: 5.8
EPSS Низкий

Описание

A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.

A NULL pointer dereference flaw was discovered in libvirt in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5libvirtNot affected
Red Hat Enterprise Linux 6libvirtNot affected
Red Hat Enterprise Linux 8libvirtNot affected
Red Hat Storage 3libvirtNot affected
Red Hat Enterprise Linux 7libvirtFixedRHSA-2019:229406.08.2019

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=1665228libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function

EPSS

Процентиль: 72%
0.00737
Низкий

5.8 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.8
ubuntu
почти 7 лет назад

A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.

CVSS3: 5.8
nvd
почти 7 лет назад

A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.

CVSS3: 5.8
debian
почти 7 лет назад

A NULL pointer dereference flaw was discovered in libvirt before versi ...

suse-cvrf
почти 7 лет назад

Security update for libvirt

suse-cvrf
почти 7 лет назад

Security update for libvirt

EPSS

Процентиль: 72%
0.00737
Низкий

5.8 Medium

CVSS3