https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 15:27:50 +0000 https://vulnerability.circl.lu/vuln/cve-2018-1064 <p><strong>Affected:</strong> libvirt</p> <p>libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent.</p> <p><strong>Affected:</strong> libvirt</p> <p>libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent.</p> https://vulnerability.circl.lu/vuln/cve-2018-1064 https://vulnerability.circl.lu/vuln/usn-3680-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libvirt, Ubuntu:16.04:LTS: libvirt, Ubuntu:18.04:LTS: libvirt</p> <p>Ken Johnson and Jann Horn independently discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via sidechannel attacks. An attacker in the guest could use this to expose sensitive guest information, including kernel memory. This update allows libvirt to expose new CPU features added by microcode updates to guests. (CVE-2018-3639)</p> <p>Daniel P. Berrange discovered that libvirt incorrectly handled the QEMU guest agent. An attacker could possibly use this issue to consume resources, leading to a denial of service. (CVE-2018-1064)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libvirt, Ubuntu:16.04:LTS: libvirt, Ubuntu:18.04:LTS: libvirt</p> <p>Ken Johnson and Jann Horn independently discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via sidechannel attacks. An attacker in the guest could use this to expose sensitive guest information, including kernel memory. This update allows libvirt to expose new CPU features added by microcode updates to guests. (CVE-2018-3639)</p> <p>Daniel P. Berrange discovered that libvirt incorrectly handled the QEMU guest agent. An attacker could possibly use this issue to consume resources, leading to a denial of service. (CVE-2018-1064)</p> https://vulnerability.circl.lu/vuln/usn-3680-1