Stay Secure with the Latest Linux Advisories

security advisorydenial of serviceupdate

Mageia: 2020-0283 Moderate: Libvirt Denial of Service Issue

Updated libvirt packages fix security vulnerability: A flaw was found in the way the libvirtd daemon issued the 'suspend' command to a QEMU guest-agent running inside a guest, where it holds a monitor job while issuing the 'suspend' command to a guest-agent. . MGASA-2020-0283 - Updated libvirt packages fix security vulnerability Publication date: 06 Jul 2020 URL: https://advisories.mageia.org/MGASA-2020-0283.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-20485 Updated libvirt packages fix security vulnerability: A flaw was found in the way the libvirtd daemon issued the 'suspend' command to a QEMU guest-agent running inside a guest, where it holds a monitor job while issuing the 'suspend' command to a guest-agent. A malicious guest-agent may use this flaw to block the libvirt daemon indefinitely, resulting in a denial of service (CVE-2019-20485). References: - https://bugs.mageia.org/show_bug.cgi?id=26816 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/D5GE6ISYUL3CIWO3FQRUGMKTKP2NYED2/ - https://www.cve.org/CVERecord?id=CVE-2019-20485 SRPMS: - 7/core/libvirt-5.5.0-1.2.mga7 . Recent updates to libvirt address a vulnerability that could lead to denial of service due to the mishandling of suspend commands.. libvirt security, Mageia update, denial of service, QEMU guest-agent, libvirt vulnerability. . LinuxSecurity.com Team

Jul 06, 2020 Mageia