https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T15:27:49.641800+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2018-1064 CVE-2018-1064 2026-09-29T15:27:49.664274+00:00

Affected: libvirt

libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent.

 https://vulnerability.circl.lu/vuln/usn-3680-1 USN-3680-1 — libvirt vulnerability and update 2026-09-29T15:27:49.664367+00:00

Affected: Ubuntu:14.04:LTS: libvirt, Ubuntu:16.04:LTS: libvirt, Ubuntu:18.04:LTS: libvirt

Ken Johnson and Jann Horn independently discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via sidechannel attacks. An attacker in the guest could use this to expose sensitive guest information, including kernel memory. This update allows libvirt to expose new CPU features added by microcode updates to guests. (CVE-2018-3639)

Daniel P. Berrange discovered that libvirt incorrectly handled the QEMU guest agent. An attacker could possibly use this issue to consume resources, leading to a denial of service. (CVE-2018-1064)