Summary
It was discovered that libvirt incorrectly handled waiting for certain
agent events. An attacker inside a guest could possibly use this issue to
cause libvirtd to stop responding, resulting in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libvirt | 1.3.1-1ubuntu10.25 |
| Ubuntu · 18.04 LTS 18.04:LTS | libvirt | 4.0.0-1ubuntu8.8 |
Vulnerabilities 1
-
Medium 5.8
A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information…
References
-
report
https://ubuntu.com/security/CVE-2019-3840