exploit the possibilities

Debian Security Advisory 4137-1

Debian Security Advisory 4137-1
Posted Mar 14, 2018
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4137-1 - Several vulnerabilities were discovered in Libvirt, a virtualisation abstraction library.

tags | advisory, vulnerability
systems | linux, debian
advisories | CVE-2018-1064, CVE-2018-5748, CVE-2018-6764
MD5 | 7382166d34b5dcc5ed9bac13004d90f7

Debian Security Advisory 4137-1

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4137-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
March 14, 2018 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : libvirt
CVE ID : CVE-2018-1064 CVE-2018-5748 CVE-2018-6764

Several vulnerabilities were discovered in Libvirt, a virtualisation
abstraction library:

CVE-2018-1064

Denial Berrange discovered that the QEMU guest agent performed
insufficient validationof incoming data, which allows a privileged
user in the guest to exhaust resources on the virtualisation host,
resulting in denial of service.

CVE-2018-5748

Daniel Berrange and Peter Krempa that the QEMU monitor was suspectible
to denial of service by memory exhaustion. This was already fixed in
Debian stretch and only affects Debian jessie.

CVE-2018-6764

Pedro Sampaio discovered that LXC containes detected the hostname
insecurely. This only affects Debian stretch.

For the oldstable distribution (jessie), these problems have been fixed
in version 1.2.9-9+deb8u5.

For the stable distribution (stretch), these problems have been fixed in
version 3.0.0-4+deb9u3.

We recommend that you upgrade your libvirt packages.

For the detailed security status of libvirt please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libvirt

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=evCW
-----END PGP SIGNATURE-----

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

March 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    15 Files
  • 2
    Mar 2nd
    5 Files
  • 3
    Mar 3rd
    3 Files
  • 4
    Mar 4th
    25 Files
  • 5
    Mar 5th
    20 Files
  • 6
    Mar 6th
    16 Files
  • 7
    Mar 7th
    17 Files
  • 8
    Mar 8th
    12 Files
  • 9
    Mar 9th
    3 Files
  • 10
    Mar 10th
    4 Files
  • 11
    Mar 11th
    23 Files
  • 12
    Mar 12th
    12 Files
  • 13
    Mar 13th
    12 Files
  • 14
    Mar 14th
    19 Files
  • 15
    Mar 15th
    12 Files
  • 16
    Mar 16th
    3 Files
  • 17
    Mar 17th
    1 Files
  • 18
    Mar 18th
    15 Files
  • 19
    Mar 19th
    22 Files
  • 20
    Mar 20th
    0 Files
  • 21
    Mar 21st
    0 Files
  • 22
    Mar 22nd
    0 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    0 Files
  • 26
    Mar 26th
    0 Files
  • 27
    Mar 27th
    0 Files
  • 28
    Mar 28th
    0 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close