Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Ubuntu 18.10, 18.04 LTS, 16.04 LTS: USN-3909-1 Critical Libvirt DDoS

ubuntu
Calendar Grey March 14, 2019
Dist Ubuntu Esm H88
=========================================================================Ubuntu Security Notice USN-
libvirt could be made to crash under certain conditions.

Summary

libvirt could be made to crash under certain conditions.

Software Description:

- libvirt: Libvirt virtualization toolkit

Details:

It was discovered that libvirt incorrectly handled waiting for certain

agent events. An attacker inside a guest could possibly use this issue to

cause libvirtd to stop responding, resulting in a denial of service.

Topics%20covered

Topics Covered

security advisory denial of service critical Ubuntu libvirt

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  libvirt-clients                 4.6.0-2ubuntu3.4
  libvirt-daemon                  4.6.0-2ubuntu3.4
  libvirt0                        4.6.0-2ubuntu3.4

Ubuntu 18.04 LTS:
  libvirt-clients                 4.0.0-1ubuntu8.8
  libvirt-daemon                  4.0.0-1ubuntu8.8
  libvirt0                        4.0.0-1ubuntu8.8

Ubuntu 16.04 LTS:
  libvirt-bin                     1.3.1-1ubuntu10.25
  libvirt0                        1.3.1-1ubuntu10.25

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3909-1

CVE-2019-3840

Severity
critical
Lowest
Low
Medium
High
Critical

March 14, 2019

Topics%20covered

Topics Covered

security advisory denial of service critical Ubuntu libvirt

Package Information

https://launchpad.net/ubuntu/+source/libvirt/4.6.0-2ubuntu3.4
https://launchpad.net/ubuntu/+source/libvirt/4.0.0-1ubuntu8.8
https://launchpad.net/ubuntu/+source/libvirt/1.3.1-1ubuntu10.25

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here