Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2019-3840

Опубликовано: 10 янв. 2019
Источник: redhat
CVSS3: 5.8

Описание

A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.

A NULL pointer dereference flaw was discovered in libvirt in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5libvirtNot affected
Red Hat Enterprise Linux 6libvirtNot affected
Red Hat Enterprise Linux 8libvirtNot affected
Red Hat Storage 3libvirtNot affected
Red Hat Enterprise Linux 7libvirtFixedRHSA-2019:229406.08.2019

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=1665228libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function

5.8 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.8
ubuntu
больше 7 лет назад

A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.

CVSS3: 5.8
nvd
больше 7 лет назад

A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.

CVSS3: 5.8
debian
больше 7 лет назад

A NULL pointer dereference flaw was discovered in libvirt before versi ...

suse-cvrf
больше 7 лет назад

Security update for libvirt

suse-cvrf
больше 7 лет назад

Security update for libvirt

5.8 Medium

CVSS3