Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:2141-1

Опубликовано: 30 июл. 2018
Источник: suse-cvrf

Описание

Security update for libvirt

This update for libvirt fixes the following issues:

Security issues fixed:

  • CVE-2018-3639: Add support for 'ssbd' and 'virt-ssbd' CPUID feature bits to address V4 Speculative Store Bypass aka 'Memory Disambiguation' (bsc#1092885).
  • CVE-2018-1064: Fix denial of service problem during reading from guest agent (bsc#1083625).
  • CVE-2018-5748: Fix resource exhaustion via qemuMonitorIORead() method (bsc#1076500).
  • CVE-2016-5008: Fix that an empty VNC password disables authentication (bsc#987527).
  • CVE-2017-5715: Fix speculative side channel attacks aka 'SpectreAttack' (var2) (bsc#1079869).

Bug fixes:

  • bsc#980558: Fix NUMA node memory allocation.
  • bsc#968483: Restart daemons in %posttrans after connection drivers.
  • bsc#897352: Systemd fails to ignore LSB services.
  • bsc#956298: virsh domxml-to-native causes segfault of libvirtd.
  • bsc#964465: libvirtd.service causes systemd warning about xencommons service.
  • bsc#954872: Script block-dmmd not working as expected.
  • bsc#854343: libvirt installation run inappropriate systemd restart.

Список пакетов

SUSE Linux Enterprise Server 12-LTSS
libvirt-1.2.5-27.13.1
libvirt-client-1.2.5-27.13.1
libvirt-daemon-1.2.5-27.13.1
libvirt-daemon-config-network-1.2.5-27.13.1
libvirt-daemon-config-nwfilter-1.2.5-27.13.1
libvirt-daemon-driver-interface-1.2.5-27.13.1
libvirt-daemon-driver-libxl-1.2.5-27.13.1
libvirt-daemon-driver-lxc-1.2.5-27.13.1
libvirt-daemon-driver-network-1.2.5-27.13.1
libvirt-daemon-driver-nodedev-1.2.5-27.13.1
libvirt-daemon-driver-nwfilter-1.2.5-27.13.1
libvirt-daemon-driver-qemu-1.2.5-27.13.1
libvirt-daemon-driver-secret-1.2.5-27.13.1
libvirt-daemon-driver-storage-1.2.5-27.13.1
libvirt-daemon-lxc-1.2.5-27.13.1
libvirt-daemon-qemu-1.2.5-27.13.1
libvirt-daemon-xen-1.2.5-27.13.1
libvirt-doc-1.2.5-27.13.1
libvirt-lock-sanlock-1.2.5-27.13.1

Описание

libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.


Затронутые продукты
SUSE Linux Enterprise Server 12-LTSS:libvirt-1.2.5-27.13.1
SUSE Linux Enterprise Server 12-LTSS:libvirt-client-1.2.5-27.13.1
SUSE Linux Enterprise Server 12-LTSS:libvirt-daemon-1.2.5-27.13.1
SUSE Linux Enterprise Server 12-LTSS:libvirt-daemon-config-network-1.2.5-27.13.1

Ссылки

Описание

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.


Затронутые продукты
SUSE Linux Enterprise Server 12-LTSS:libvirt-1.2.5-27.13.1
SUSE Linux Enterprise Server 12-LTSS:libvirt-client-1.2.5-27.13.1
SUSE Linux Enterprise Server 12-LTSS:libvirt-daemon-1.2.5-27.13.1
SUSE Linux Enterprise Server 12-LTSS:libvirt-daemon-config-network-1.2.5-27.13.1

Ссылки

Описание

libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent.


Затронутые продукты
SUSE Linux Enterprise Server 12-LTSS:libvirt-1.2.5-27.13.1
SUSE Linux Enterprise Server 12-LTSS:libvirt-client-1.2.5-27.13.1
SUSE Linux Enterprise Server 12-LTSS:libvirt-daemon-1.2.5-27.13.1
SUSE Linux Enterprise Server 12-LTSS:libvirt-daemon-config-network-1.2.5-27.13.1

Ссылки

Описание

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.


Затронутые продукты
SUSE Linux Enterprise Server 12-LTSS:libvirt-1.2.5-27.13.1
SUSE Linux Enterprise Server 12-LTSS:libvirt-client-1.2.5-27.13.1
SUSE Linux Enterprise Server 12-LTSS:libvirt-daemon-1.2.5-27.13.1
SUSE Linux Enterprise Server 12-LTSS:libvirt-daemon-config-network-1.2.5-27.13.1

Ссылки

Описание

qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply.


Затронутые продукты
SUSE Linux Enterprise Server 12-LTSS:libvirt-1.2.5-27.13.1
SUSE Linux Enterprise Server 12-LTSS:libvirt-client-1.2.5-27.13.1
SUSE Linux Enterprise Server 12-LTSS:libvirt-daemon-1.2.5-27.13.1
SUSE Linux Enterprise Server 12-LTSS:libvirt-daemon-config-network-1.2.5-27.13.1

Ссылки
Уязвимость SUSE-SU-2018:2141-1