p PatchFirst

CVE-2018-1064

CVE-2018-1064

This page contains facts from public vulnerability sources. Check the original advisory before updating.

libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent.

CVSS 7.5 · High · EPSS 2.9% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • libvirt

    Versions
    • before 4.2.0-rc1: Affected

    No fix published

  • libvirt Debian:12

    Affected ranges
    • ECOSYSTEM: < 4.1.0-1

    Update to 4.1.0-1

  • libvirt Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.1.0-1

    Update to 4.1.0-1

  • libvirt Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.1.0-1

    Update to 4.1.0-1

  • libvirt Ubuntu:14.04:LTS

    Versions
    • 1.1.1-0ubuntu8
    • 1.1.1-0ubuntu9
    • 1.1.4-0ubuntu2
    • 1.1.4-0ubuntu3
    • 1.1.4-0ubuntu4
    • 1.1.4-0ubuntu5
    • 1.2.0-0ubuntu1
    • 1.2.0-0ubuntu2
    • 1.2.0-0ubuntu3
    • 1.2.1-0ubuntu1
    • 1.2.1-0ubuntu2
    • 1.2.1-0ubuntu3
    • 1.2.1-0ubuntu4
    • 1.2.1-0ubuntu5
    • 1.2.1-0ubuntu7
    • 1.2.1-0ubuntu8
    • 1.2.1-0ubuntu9
    • 1.2.1-0ubuntu10
    • 1.2.2-0ubuntu1
    • 1.2.2-0ubuntu2
    • 1.2.2-0ubuntu3
    • 1.2.2-0ubuntu4
    • 1.2.2-0ubuntu5
    • 1.2.2-0ubuntu6
    • 1.2.2-0ubuntu7
    • 1.2.2-0ubuntu8
    • 1.2.2-0ubuntu9
    • 1.2.2-0ubuntu10
    • 1.2.2-0ubuntu11
    • 1.2.2-0ubuntu12
    • 1.2.2-0ubuntu13
    • 1.2.2-0ubuntu13.1
    • 1.2.2-0ubuntu13.1.1
    • 1.2.2-0ubuntu13.1.2
    • 1.2.2-0ubuntu13.1.4
    • 1.2.2-0ubuntu13.1.5
    • 1.2.2-0ubuntu13.1.6
    • 1.2.2-0ubuntu13.1.7
    • 1.2.2-0ubuntu13.1.8
    • 1.2.2-0ubuntu13.1.9
    • 1.2.2-0ubuntu13.1.10
    • 1.2.2-0ubuntu13.1.12
    • 1.2.2-0ubuntu13.1.14
    • 1.2.2-0ubuntu13.1.16
    • 1.2.2-0ubuntu13.1.17
    • 1.2.2-0ubuntu13.1.20
    • 1.2.2-0ubuntu13.1.21
    • 1.2.2-0ubuntu13.1.22
    • 1.2.2-0ubuntu13.1.23
    • 1.2.2-0ubuntu13.1.25
    • 1.2.2-0ubuntu13.1.26
    Affected ranges
    • ECOSYSTEM: < 1.2.2-0ubuntu13.1.27

    Update to 1.2.2-0ubuntu13.1.27

  • libvirt Ubuntu:16.04:LTS

    Versions
    • 1.2.16-2ubuntu11
    • 1.2.16-2ubuntu12
    • 1.2.16-2ubuntu13
    • 1.2.16-2ubuntu14
    • 1.2.21-2ubuntu1
    • 1.2.21-2ubuntu3
    • 1.2.21-2ubuntu4
    • 1.2.21-2ubuntu5
    • 1.2.21-2ubuntu7
    • 1.2.21-2ubuntu8
    • 1.2.21-2ubuntu9
    • 1.2.21-2ubuntu10
    • 1.3.1-1ubuntu1
    • 1.3.1-1ubuntu2
    • 1.3.1-1ubuntu3
    • 1.3.1-1ubuntu4
    • 1.3.1-1ubuntu6
    • 1.3.1-1ubuntu9
    • 1.3.1-1ubuntu10
    • 1.3.1-1ubuntu10.1
    • 1.3.1-1ubuntu10.2
    • 1.3.1-1ubuntu10.3
    • 1.3.1-1ubuntu10.5
    • 1.3.1-1ubuntu10.6
    • 1.3.1-1ubuntu10.7
    • 1.3.1-1ubuntu10.8
    • 1.3.1-1ubuntu10.10
    • 1.3.1-1ubuntu10.11
    • 1.3.1-1ubuntu10.12
    • 1.3.1-1ubuntu10.13
    • 1.3.1-1ubuntu10.14
    • 1.3.1-1ubuntu10.15
    • 1.3.1-1ubuntu10.17
    • 1.3.1-1ubuntu10.18
    • 1.3.1-1ubuntu10.19
    • 1.3.1-1ubuntu10.21
    • 1.3.1-1ubuntu10.22
    • 1.3.1-1ubuntu10.23
    Affected ranges
    • ECOSYSTEM: < 1.3.1-1ubuntu10.24

    Update to 1.3.1-1ubuntu10.24

  • libvirt Ubuntu:18.04:LTS

    Versions
    • 3.6.0-1ubuntu5
    • 3.6.0-1ubuntu6
    • 4.0.0-1ubuntu1
    • 4.0.0-1ubuntu2
    • 4.0.0-1ubuntu3
    • 4.0.0-1ubuntu4
    • 4.0.0-1ubuntu5
    • 4.0.0-1ubuntu6
    • 4.0.0-1ubuntu7
    • 4.0.0-1ubuntu8
    • 4.0.0-1ubuntu8.1
    Affected ranges
    • ECOSYSTEM: < 4.0.0-1ubuntu8.2

    Update to 4.0.0-1ubuntu8.2

Original sources

Check your server →