SUSE-SU-2019:0948-1: libvirt&distro=SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 15-04-2019Last modified 04-02-2026
Open JSON

Vulnerability summary

SUSE-SU-2019:0948-1 is a vulnerability in libvirt&distro=SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 2 · Downstream 0 · Related 2
CVE-2019-3840CVE-2019-3886

Timeline

  1. 15-04-2019
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for libvirt This update for libvirt fixes the following issues: Security issue fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent (bsc#1127458). - CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest hostname under readonly mode (bsc#1131595). Other issues addressed: - libxl: support Xen's max_grant_frames setting with maxGrantFrames attribute on the xenbus controller (bsc#1126325). - conf: added new 'xenbus' controller type - util: skip RDMA detection for non-PCI network devices (bsc#1112182). - qemu: don't use CAP_DAC_OVERRIDE capability if non-root (bsc#1125665). - qemu: fix issues related to restricted permissions on /dev/sev(bsc#1102604). - libxl: save current memory value after successful balloon (bsc#1120813). - libxl: Add support for soft reset. (bsc#1081516)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse4 products
  • libvirt&distro=SUSE Linux Enterprise Desktop 12 SP4< 4.0.0-8.9.1
  • libvirt&distro=SUSE Linux Enterprise Server 12 SP4< 4.0.0-8.9.1
  • libvirt&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4< 4.0.0-8.9.1
  • libvirt&distro=SUSE Linux Enterprise Software Development Kit 12 SP4< 4.0.0-8.9.1

1 vendor · 4 products

References

11 links
Show all 11 references