CVE-2018-5748
Fixed in a distro release EPSS 3%
qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply.
Products: redhat libvirt, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | libvirt | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-admin | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-client | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-config-network | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-config-nwfilter | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-driver-interface | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-driver-lxc | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-driver-network | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-driver-nodedev | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-driver-nwfilter | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-driver-qemu | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-driver-secret | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-driver-storage | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-driver-storage-core | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-driver-storage-disk | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-driver-storage-gluster | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-driver-storage-iscsi | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-driver-storage-logical | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-driver-storage-mpath | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-driver-storage-rbd | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-driver-storage-scsi | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-kvm | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-daemon-lxc | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-devel | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-docs | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-libs | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-lock-sanlock | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-login-shell | 3.9.0-14.amzn2.6 |
| Amazon Linux 2 | libvirt-nss | 3.9.0-14.amzn2.6 |
| Debian 12 | libvirt | 4.0.0-1 |
| Debian 13 | libvirt | 4.0.0-1 |
| Debian 14 | libvirt | 4.0.0-1 |
| Debian 7 | libvirt | 0.9.12.3-1+deb7u3 |
| Red Hat Enterprise Linux 6 | libvirt | 0:0.10.2-64.el6 |
| Red Hat Enterprise Linux 6 | libvirt-client | 0:0.10.2-64.el6 |
| Red Hat Enterprise Linux 6 | libvirt-debuginfo | 0:0.10.2-64.el6 |
| Red Hat Enterprise Linux 6 | libvirt-devel | 0:0.10.2-64.el6 |
| Red Hat Enterprise Linux 6 | libvirt-lock-sanlock | 0:0.10.2-64.el6 |
| Red Hat Enterprise Linux 6 | libvirt-python | 0:0.10.2-64.el6 |
| Red Hat Enterprise Linux 7 | libvirt | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-admin | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-client | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-config-network | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-config-nwfilter | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-interface | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-lxc | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-network | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-nodedev | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-nwfilter | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-qemu | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-secret | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-storage | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-storage-core | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-storage-disk | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-storage-gluster | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-storage-iscsi | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-storage-logical | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-storage-mpath | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-storage-rbd | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-storage-scsi | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-kvm | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-lxc | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-debuginfo | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-devel | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-docs | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-libs | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-lock-sanlock | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-login-shell | 0:3.9.0-14.el7_5.4 |
| Red Hat Enterprise Linux 7 | libvirt-nss | 0:3.9.0-14.el7_5.4 |
| Red Hat storage 3 server el6 | libvirt-lock-sanlock | 0:0.10.2-64.el6 |
| SUSE Linux Enterprise Desktop 12 SP2 | libvirt | 2.0.0-27.29.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | libvirt | 3.3.0-5.13.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | libvirt | 1.0.5.9-21.5.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | libvirt | 1.0.5.9-21.5.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | libvirt | 1.0.5.9-21.5.1 |
| SUSE Linux Enterprise Server 11 SP4 | libvirt | 1.2.5-23.6.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | libvirt | 1.2.18.4-22.3.1 |
| SUSE Linux Enterprise Server 12 SP2 | libvirt | 2.0.0-27.29.1 |
| SUSE Linux Enterprise Server 12 SP3 | libvirt | 3.3.0-5.13.1 |
| SUSE Linux Enterprise Server 12-LTSS | libvirt | 1.2.5-27.13.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | libvirt | 2.0.0-27.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | libvirt | 1.2.5-23.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libvirt | 1.2.18.4-22.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libvirt | 2.0.0-27.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | libvirt | 3.3.0-5.13.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libvirt | 1.2.5-23.6.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | libvirt | 2.0.0-27.29.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | libvirt | 3.3.0-5.13.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP2 | libvirt | 2.0.0-27.29.1 |
| Ubuntu 14.04 LTS | libvirt | 1.2.2-0ubuntu13.1.26 |
| Ubuntu 16.04 LTS | libvirt | 1.3.1-1ubuntu10.19 |
| openSUSE Tumbleweed | libvirt | 7.7.0-2.1 |