{"id":"CVE-2019-3840","aliases":["BELL-CVE-2019-3840","DEBIAN-CVE-2019-3840","EUVD-2019-13460","GHSA-rx4m-pcxc-jchp","MGASA-2019-0138","RHSA-2019:2294","SUSE-SU-2019:0553-1","SUSE-SU-2019:0936-1","SUSE-SU-2019:0948-1","SUSE-SU-2019:1042-1","UBUNTU-CVE-2019-3840","USN-3909-1","openSUSE-SU-2019:1288-1"],"status":"published","title":"A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets...","description":"A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.","severity":{"version":"3.0","score":5.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.01482,"percentile":0.74138,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2019-02-27T00:00:00Z","modified":"2026-10-24T10:30:54Z","fixes":[{"ecosystem":"Debian:12","package":"libvirt","fixed_in":["5.0.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libvirt","fixed_in":["5.0.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libvirt","fixed_in":["5.0.0-1"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"libvirt","fixed_in":["3.10.0-1.5.mga6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-bash-completion","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-client","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-config-network","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-config-nwfilter","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-interface","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-lxc","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-network","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-nodedev","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-nwfilter","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-qemu","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-secret","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage-core","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage-disk","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage-gluster","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage-iscsi","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage-logical","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage-mpath","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage-rbd","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage-scsi","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-kvm","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-debuginfo","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-libs","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-admin","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-lxc","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-devel","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-docs","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-lock-sanlock","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-login-shell","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-nss","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-bash-completion","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-client","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-debuginfo","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-libs","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-admin","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-config-network","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-config-nwfilter","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-interface","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-lxc","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-network","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-nodedev","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-nwfilter","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-qemu","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-secret","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage-core","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage-disk","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage-gluster","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage-iscsi","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage-logical","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage-mpath","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage-rbd","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage-scsi","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-kvm","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-lxc","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-devel","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-docs","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-lock-sanlock","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-login-shell","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-nss","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-bash-completion","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-client","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-config-network","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-config-nwfilter","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-interface","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-lxc","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-network","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-nodedev","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-nwfilter","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-qemu","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-secret","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage-core","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage-disk","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage-gluster","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage-iscsi","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage-logical","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage-mpath","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage-rbd","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage-scsi","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-kvm","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-debuginfo","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-devel","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-docs","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-libs","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-admin","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-lxc","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-lock-sanlock","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-login-shell","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-nss","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-bash-completion","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-client","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-config-network","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-config-nwfilter","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-interface","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-lxc","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-network","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-nodedev","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-nwfilter","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-qemu","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-secret","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage-core","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage-disk","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage-gluster","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage-iscsi","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage-logical","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage-mpath","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage-rbd","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage-scsi","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-kvm","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-debuginfo","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-devel","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-docs","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-libs","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-admin","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-lxc","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-lock-sanlock","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-login-shell","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-nss","fixed_in":["0:4.5.0-23.el7"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"libvirt","fixed_in":["2.0.0-27.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libvirt","fixed_in":["2.0.0-27.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"libvirt","fixed_in":["2.0.0-27.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libvirt","fixed_in":["2.0.0-27.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 4","package":"libvirt","fixed_in":["2.0.0-27.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libvirt","fixed_in":["4.0.0-9.16.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15","package":"libvirt","fixed_in":["4.0.0-9.16.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libvirt","fixed_in":["1.3.1-1ubuntu10.25"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libvirt","fixed_in":["4.0.0-1ubuntu8.8"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"libvirt","fixed_in":["4.0.0-lp150.7.10.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-1"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1.5.mga6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-bash-completion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage-disk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage-logical","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage-mpath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage-scsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-bash-completion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage-disk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage-logical","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage-mpath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage-scsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-bash-completion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage-disk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage-logical","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage-mpath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage-scsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-bash-completion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage-disk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage-logical","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage-mpath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage-scsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.el7"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-27.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-27.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-27.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-27.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-27.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-9.16.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-9.16.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-8.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-8.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-8.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-8.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-5.30.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-5.30.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-5.30.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-5.30.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1ubuntu10.25"}]}],"versions":["1.2.16-2ubuntu11","1.2.16-2ubuntu12","1.2.16-2ubuntu13","1.2.16-2ubuntu14","1.2.21-2ubuntu1","1.2.21-2ubuntu3","1.2.21-2ubuntu4","1.2.21-2ubuntu5","1.2.21-2ubuntu7","1.2.21-2ubuntu8","1.2.21-2ubuntu9","1.2.21-2ubuntu10","1.3.1-1ubuntu1","1.3.1-1ubuntu2","1.3.1-1ubuntu3","1.3.1-1ubuntu4","1.3.1-1ubuntu6","1.3.1-1ubuntu9","1.3.1-1ubuntu10","1.3.1-1ubuntu10.1","1.3.1-1ubuntu10.2","1.3.1-1ubuntu10.3","1.3.1-1ubuntu10.5","1.3.1-1ubuntu10.6","1.3.1-1ubuntu10.7","1.3.1-1ubuntu10.8","1.3.1-1ubuntu10.10","1.3.1-1ubuntu10.11","1.3.1-1ubuntu10.12","1.3.1-1ubuntu10.13","1.3.1-1ubuntu10.14","1.3.1-1ubuntu10.15","1.3.1-1ubuntu10.17","1.3.1-1ubuntu10.18","1.3.1-1ubuntu10.19","1.3.1-1ubuntu10.21","1.3.1-1ubuntu10.22","1.3.1-1ubuntu10.23","1.3.1-1ubuntu10.24"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-1ubuntu8.8"}]}],"versions":["3.6.0-1ubuntu5","3.6.0-1ubuntu6","4.0.0-1ubuntu1","4.0.0-1ubuntu2","4.0.0-1ubuntu3","4.0.0-1ubuntu4","4.0.0-1ubuntu5","4.0.0-1ubuntu6","4.0.0-1ubuntu7","4.0.0-1ubuntu8","4.0.0-1ubuntu8.1","4.0.0-1ubuntu8.2","4.0.0-1ubuntu8.3","4.0.0-1ubuntu8.4","4.0.0-1ubuntu8.5","4.0.0-1ubuntu8.6","4.0.0-1ubuntu8.7"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1ubuntu10.25"}]}],"versions":["1.2.16-2ubuntu11","1.2.16-2ubuntu12","1.2.16-2ubuntu13","1.2.16-2ubuntu14","1.2.21-2ubuntu1","1.2.21-2ubuntu3","1.2.21-2ubuntu4","1.2.21-2ubuntu5","1.2.21-2ubuntu7","1.2.21-2ubuntu8","1.2.21-2ubuntu9","1.2.21-2ubuntu10","1.3.1-1ubuntu1","1.3.1-1ubuntu2","1.3.1-1ubuntu3","1.3.1-1ubuntu4","1.3.1-1ubuntu6","1.3.1-1ubuntu9","1.3.1-1ubuntu10","1.3.1-1ubuntu10.1","1.3.1-1ubuntu10.2","1.3.1-1ubuntu10.3","1.3.1-1ubuntu10.5","1.3.1-1ubuntu10.6","1.3.1-1ubuntu10.7","1.3.1-1ubuntu10.8","1.3.1-1ubuntu10.10","1.3.1-1ubuntu10.11","1.3.1-1ubuntu10.12","1.3.1-1ubuntu10.13","1.3.1-1ubuntu10.14","1.3.1-1ubuntu10.15","1.3.1-1ubuntu10.17","1.3.1-1ubuntu10.18","1.3.1-1ubuntu10.19","1.3.1-1ubuntu10.21","1.3.1-1ubuntu10.22","1.3.1-1ubuntu10.23","1.3.1-1ubuntu10.24"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-1ubuntu8.8"}]}],"versions":["3.6.0-1ubuntu5","3.6.0-1ubuntu6","4.0.0-1ubuntu1","4.0.0-1ubuntu2","4.0.0-1ubuntu3","4.0.0-1ubuntu4","4.0.0-1ubuntu5","4.0.0-1ubuntu6","4.0.0-1ubuntu7","4.0.0-1ubuntu8","4.0.0-1ubuntu8.1","4.0.0-1ubuntu8.2","4.0.0-1ubuntu8.3","4.0.0-1ubuntu8.4","4.0.0-1ubuntu8.5","4.0.0-1ubuntu8.6","4.0.0-1ubuntu8.7"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-lp150.7.10.4"}]}]}],"products":[{"vendor":"opensuse","product":"leap"},{"vendor":"redhat","product":"libvirt"},{"vendor":"the libvirt project","product":"libvirt"},{"vendor":"ubuntu","product":"libvirt"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3840","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","Patch","Vendor Advisory","fix"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1663051","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","Third Party Advisory","Vendor Advisory","report"]},{"url":"https://www.redhat.com/archives/libvir-list/2019-January/msg00241.html","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Vendor Advisory","evidence","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00101.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00105.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZRP2BRMI4RYFRPNFTTIAAUOGVN2ORP7/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2294","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3840","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TZRP2BRMI4RYFRPNFTTIAAUOGVN2ORP7/"},{"url":"https://github.com/advisories/GHSA-rx4m-pcxc-jchp"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-3840","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-3840","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0138.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24528","tags":["report"]},{"url":"https://usn.ubuntu.com/3909-1/","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1558558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1584663","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1592737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609720","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612943","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615680","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628469","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628892","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631622","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632833","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633389","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1641702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1647365","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1652894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656360","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1657468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1658198","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1658406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1658652","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1660531","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1665228","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1665474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1665553","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1669581","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1669586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1683175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691358","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692296","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1716387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1718172","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2294.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3840","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3840","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190553-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1104662","tags":["report"]},{"url":"https://bugzilla.suse.com/1120813","tags":["report"]},{"url":"https://bugzilla.suse.com/1127458","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3840","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190936-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1081516","tags":["report"]},{"url":"https://bugzilla.suse.com/1102604","tags":["report"]},{"url":"https://bugzilla.suse.com/1106420","tags":["report"]},{"url":"https://bugzilla.suse.com/1108086","tags":["report"]},{"url":"https://bugzilla.suse.com/1108395","tags":["report"]},{"url":"https://bugzilla.suse.com/1112182","tags":["report"]},{"url":"https://bugzilla.suse.com/1117058","tags":["report"]},{"url":"https://bugzilla.suse.com/1118952","tags":["report"]},{"url":"https://bugzilla.suse.com/1123642","tags":["report"]},{"url":"https://bugzilla.suse.com/1124667","tags":["report"]},{"url":"https://bugzilla.suse.com/1125665","tags":["report"]},{"url":"https://bugzilla.suse.com/1126325","tags":["report"]},{"url":"https://bugzilla.suse.com/1130129","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190948-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1131595","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3886","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191042-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1131955","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3840","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3909-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/777DJPBBP6OVYLNA33AECP7XPWPDPERV/#777DJPBBP6OVYLNA33AECP7XPWPDPERV","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-3840","description":"A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.","status":"published","published":"2019-03-27T12:24:10Z","modified":"2024-08-04T19:19:18.58Z","cvss":[{"version":"3.0","score":5.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:20:23.048861Z"}],"euvd":[{"id":"EUVD-2019-13460","description":"A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.","status":"published","published":"2019-03-27T12:24:10Z","modified":"2024-08-04T19:19:18Z","cvss":[{"version":"3.0","score":5.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T03:06:54.939848Z"}],"ghsa":[{"id":"GHSA-rx4m-pcxc-jchp","title":"A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets...","description":"A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.","status":"published","published":"2022-05-14T01:05:47Z","modified":"2023-02-02T05:02:57Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:51:32.364862Z"}],"nvd":[{"id":"CVE-2019-3840","description":"A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.","status":"published","published":"2019-03-27T13:29:01.68Z","modified":"2026-06-17T02:35:42.107Z","cvss":[{"version":"3.0","score":5.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:05:09.523883Z"}],"osv":[{"id":"BELL-CVE-2019-3840","title":"CVE-2019-3840 does not affect BellSoft software","status":"withdrawn","published":"2019-03-27T13:29:00Z","modified":"2026-01-26T09:46:14.506509Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-3840","description":"A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.","status":"published","published":"2019-03-27T13:29:01.68Z","modified":"2026-10-24T10:30:54.916953214Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:12.363788Z"},{"id":"DEBIAN-CVE-2019-3840","description":"A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.","status":"published","published":"2019-03-27T13:29:01.68Z","modified":"2026-09-21T07:03:18.703600188Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"RHSA-2019:2294","title":"Red Hat Security Advisory: libvirt security, bug fix, and enhancement update","status":"published","published":"2024-09-16T02:19:40Z","modified":"2026-06-26T12:22:03.992339282Z","cvss":[{"version":"3.0","score":5.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2019-3840","description":"A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.","status":"published","published":"2019-02-27T00:00:00Z","modified":"2026-04-22T11:57:03.183344Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"},{"version":"3.0","score":5.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:21.213407Z"},{"id":"MGASA-2019-0138","title":"Updated libvirt packages fix security vulnerability","description":"NULL pointer dereference after running qemuAgentCommand in\nqemuAgentGetInterfaces function. (CVE-2019-3840)\n","status":"published","published":"2019-04-10T21:25:19Z","modified":"2026-04-16T04:44:28.583067414Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2019:1288-1","title":"Security update for libvirt","description":"This update for libvirt provides the following fixes:\n\nSecurity issue fixed: \n\n- CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could \n  have resulted in a remote denial of service via the guest agent (bsc#1127458).  \n\nOther issues addressed: \n\n- apparmor: reintroduce upstream lxc mount rules (bsc#1130129).\n- hook: encode incoming XML to UTF-8 before passing to lxml etree from string method (bsc#1123642).\n- supportconfig: collect rotated logs in /var/log/libvirt/* (bsc#1124667).\n- libxl: support Xen's max_grant_frames setting with maxGrantFrames attribute on the xenbus controller (bsc#1126325).\n- conf: added new 'xenbus' controller type\n- util: skip RDMA detection for non-PCI network devices (bsc#1112182).\n- qemu: don't use CAP_DAC_OVERRIDE capability if non-root (bsc#1125665).\n- qemu: fix issues related to restricted permissions on /dev/sev(bsc#1102604).\n- apparmor: add support for named profiles (bsc#1118952).\n- libxl: save current memory value after successful balloon (bsc#1120813).\n- apparmor: Fix ptrace rules. (bsc#1117058)\n- libxl: Add support for soft reset. (bsc#1081516)\n- libxl: Fix VM migration on busy hosts. (bsc#1108086)\n- qemu: Add support for SEV guests. (fate#325817)\n- util: Don't check for parallel iteration in hash-related functions. (bsc#1106420)\n- spec: Don't restart libvirt-guests when updating libvirt-client. (bsc#1104662)\n- Fix virNodeGetSEVInfo API crashing libvirtd on AMD SEV enabled hosts. (bsc#1108395)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-04-28T19:10:26Z","modified":"2026-02-04T03:31:58.985323Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"SUSE-SU-2019:0553-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could\n  have resulted in a remote denial of service via the guest agent (bsc#1127458).\n\nOther issues fixed:   \n\n- libxl: save current memory value after successful balloon (bsc#1120813).\n- spec: Don't restart libvirt-guests when updating libvirt-client (bsc#1104662).\n","status":"published","published":"2019-04-04T11:37:20Z","modified":"2026-02-04T02:45:58.986301Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0936-1","title":"Security update for libvirt","description":"This update for libvirt provides the following fixes:\n\nSecurity issue fixed: \n\n- CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could \n  have resulted in a remote denial of service via the guest agent (bsc#1127458).  \n\nOther issues addressed: \n\n- apparmor: reintroduce upstream lxc mount rules (bsc#1130129).\n- hook: encode incoming XML to UTF-8 before passing to lxml etree from string method (bsc#1123642).\n- supportconfig: collect rotated logs in /var/log/libvirt/* (bsc#1124667).\n- libxl: support Xen's max_grant_frames setting with maxGrantFrames attribute on the xenbus controller (bsc#1126325).\n- conf: added new 'xenbus' controller type\n- util: skip RDMA detection for non-PCI network devices (bsc#1112182).\n- qemu: don't use CAP_DAC_OVERRIDE capability if non-root (bsc#1125665).\n- qemu: fix issues related to restricted permissions on /dev/sev(bsc#1102604).\n- apparmor: add support for named profiles (bsc#1118952).\n- libxl: save current memory value after successful balloon (bsc#1120813).\n- apparmor: Fix ptrace rules. (bsc#1117058)\n- libxl: Add support for soft reset. (bsc#1081516)\n- libxl: Fix VM migration on busy hosts. (bsc#1108086)\n- qemu: Add support for SEV guests. (fate#325817)\n- util: Don't check for parallel iteration in hash-related functions. (bsc#1106420)\n- spec: Don't restart libvirt-guests when updating libvirt-client. (bsc#1104662)\n- Fix virNodeGetSEVInfo API crashing libvirtd on AMD SEV enabled hosts. (bsc#1108395)\n","status":"published","published":"2019-04-12T07:06:33Z","modified":"2026-02-04T02:34:30.015663Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0948-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\nSecurity issue fixed: \n\n- CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could\n  have resulted in a remote denial of service via the guest agent (bsc#1127458).\n- CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest\n  hostname under readonly mode (bsc#1131595).\n\nOther issues addressed: \n\n- libxl: support Xen's max_grant_frames setting with maxGrantFrames attribute on the xenbus controller (bsc#1126325).\n- conf: added new 'xenbus' controller type\n- util: skip RDMA detection for non-PCI network devices (bsc#1112182).\n- qemu: don't use CAP_DAC_OVERRIDE capability if non-root (bsc#1125665).\n- qemu: fix issues related to restricted permissions on /dev/sev(bsc#1102604).\n- libxl: save current memory value after successful balloon (bsc#1120813).\n- libxl: Add support for soft reset. (bsc#1081516)\n","status":"published","published":"2019-04-15T09:55:42Z","modified":"2026-02-04T02:38:09.060296Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1042-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could \n  have resulted in a remote denial of service via the guest agent (bsc#1127458).  \n- CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest\n  hostname under readonly mode (bsc#1131595).\n\nOther issue addressed: \n\n- cpu: add Skylake-Server and Skylake-Server-IBRS CPU models (FATE#327261, bsc#1131955)\n- libxl: save current memory value after successful balloon (bsc#1120813).\n- libxl: support Xen's max_grant_frames setting with maxGrantFrames attribute on the xenbus controller (bsc#1126325).\n- conf: add new 'xenbus' controller type\n","status":"published","published":"2019-04-26T06:41:19Z","modified":"2026-02-04T03:02:00.337762Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"USN-3909-1","title":"libvirt vulnerability","description":"It was discovered that libvirt incorrectly handled waiting for certain\nagent events. An attacker inside a guest could possibly use this issue to\ncause libvirtd to stop responding, resulting in a denial of service.\n","status":"published","published":"2019-03-14T17:53:47Z","modified":"2026-04-22T09:54:41.258247Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}