Debian/libvirt: medium 6.3
A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash lib
Action: Upgrade libvirt to 5.0.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.0-1 | - |
Fixed versions
| 5.0.0-1 |
Sources
- osv: DEBIAN-CVE-2019-3840#Debian:13/libvirt
- https://security-tracker.debian.org/tracker/CVE-2019-3840
published · modified · JSON