Skip to content
OpenAdvisories
Low ALAS2-2018-1049 2 CVEs

Low: libvirt security update (Amazon Linux 2)

Published Jul 24, 2018 · Updated Sep 23, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-5748: qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply. 1528396: CVE-2018-5748 libvirt: Resource exhaustion via qemuMonitorIORead() method CVE-2018-1064: An incomplete fix for CVE-2018-5748 that affects QEMU monitor leading to a resource exhaustion but now also triggered via QEMU guest agent. 1550672: CVE-2018-1064 libvirt: Incomplete fix for CVE-2018-5748 triggered by QEMU guest agent

Fixed packages 31

ReleasePackageFixed in
Amazon Linux · 2 libvirt 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-admin 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-client 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-config-network 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-config-nwfilter 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-driver-interface 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-driver-lxc 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-driver-network 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-driver-nodedev 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-driver-nwfilter 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-driver-qemu 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-driver-secret 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-driver-storage 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-driver-storage-core 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-driver-storage-disk 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-driver-storage-gluster 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-driver-storage-iscsi 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-driver-storage-logical 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-driver-storage-mpath 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-driver-storage-rbd 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-driver-storage-scsi 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-kvm 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-daemon-lxc 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-debuginfo 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-devel 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-docs 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-libs 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-lock-sanlock 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-login-shell 0:3.9.0-14.amzn2.6
Amazon Linux · 2 libvirt-nss 0:3.9.0-14.amzn2.6

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-1064.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-5748.html