CVE-2018-1064
libvirt-daemon-driver-storage-rbd: libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018...
CVE-2018-1064 is fixed in 12 products on 1 platform, first by libnss-libvirt 4.0.0-1ubuntu8.2, released May 21, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0286
86th percentile
libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libnss-libvirt · Ubuntu 18.04.6 LTS (bionic) | 4.0.0-1ubuntu8.2 | libnss-libvirt 4.0.0-1ubuntu8.2 | May 21, 2018 |
| libvirt-bin · Ubuntu 18.04.6 LTS (bionic) | 4.0.0-1ubuntu8.2 | libvirt-bin 4.0.0-1ubuntu8.2 | May 21, 2018 |
| libvirt-clients · Ubuntu 18.04.6 LTS (bionic) | 4.0.0-1ubuntu8.2 | libvirt-clients 4.0.0-1ubuntu8.2 | May 21, 2018 |
| libvirt-daemon · Ubuntu 18.04.6 LTS (bionic) | 4.0.0-1ubuntu8.2 | libvirt-daemon 4.0.0-1ubuntu8.2 | May 21, 2018 |
| libvirt-daemon-driver-storage-gluster · Ubuntu 18.04.6 LTS (bionic) | 4.0.0-1ubuntu8.2 | libvirt-daemon-driver-storage-gluster 4.0.0-1ubuntu8.2 | May 21, 2018 |
| libvirt-daemon-driver-storage-rbd · Ubuntu 18.04.6 LTS (bionic) | 4.0.0-1ubuntu8.2 | libvirt-daemon-driver-storage-rbd 4.0.0-1ubuntu8.2 | May 21, 2018 |
| libvirt-daemon-driver-storage-sheepdog · Ubuntu 18.04.6 LTS (bionic) | 4.0.0-1ubuntu8.2 | libvirt-daemon-driver-storage-sheepdog 4.0.0-1ubuntu8.2 | May 21, 2018 |
| libvirt-daemon-driver-storage-zfs · Ubuntu 18.04.6 LTS (bionic) | 4.0.0-1ubuntu8.2 | libvirt-daemon-driver-storage-zfs 4.0.0-1ubuntu8.2 | May 21, 2018 |
| libvirt-daemon-system · Ubuntu 18.04.6 LTS (bionic) | 4.0.0-1ubuntu8.2 | libvirt-daemon-system 4.0.0-1ubuntu8.2 | May 21, 2018 |
| libvirt-sanlock · Ubuntu 18.04.6 LTS (bionic) | 4.0.0-1ubuntu8.2 | libvirt-sanlock 4.0.0-1ubuntu8.2 | May 21, 2018 |
| libvirt-wireshark · Ubuntu 18.04.6 LTS (bionic) | 4.0.0-1ubuntu8.2 | libvirt-wireshark 4.0.0-1ubuntu8.2 | May 21, 2018 |
| libvirt0 · Ubuntu 18.04.6 LTS (bionic) | 4.0.0-1ubuntu8.2 | libvirt0 4.0.0-1ubuntu8.2 | May 21, 2018 |