Bug 1550672 (CVE-2018-1064)

Summary:	CVE-2018-1064 libvirt: Incomplete fix for CVE-2018-5748 triggered by QEMU guest agent
Product:	[Other] Security Response	Reporter:	Pedro Sampaio <psampaio>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	agedosier, berrange, clalancette, eblake, erik-fedora, itamar, jdenemar, jforbes, jsuchane, knoel, laine, libvirt-maint, marcandre.lureau, pkrempa, rjones, security-response-team, sisharma, smohan, ssaha, vbellur, veillard, yozone
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	libvirt 4.2.0-rc1	Doc Type:	If docs needed, set a value
Doc Text:	An incomplete fix for CVE-2018-5748 that affects QEMU monitor leading to a resource exhaustion but now also triggered via QEMU guest agent.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2018-10-24 08:58:23 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1550999, 1551000, 1559517, 1559518, 1559519, 1566979
Bug Blocks:	1550676

Description Pedro Sampaio 2018-03-01 18:50:11 UTC

An incomplete fix for CVE-2018-5748 that affects QEMU monitor leading to a resource exhaustion but now also triggered via QEMU guest agent.

Upstream patch:

https://libvirt.org/git/?p=libvirt.git;a=commit;h=fbf31e1a4cd19d6f6e33e0937a009775cd7d9513

Comment 4 Raphael Sanchez Prudencio 2018-03-22 17:08:51 UTC

Created mingw-libvirt tracking bugs for this issue:

Affects: fedora-all [bug 1559517]

Comment 7 Raphael Sanchez Prudencio 2018-05-14 11:50:27 UTC

Acknowledgments:

Name: Daniel P. Berrange (Red Hat)

Comment 8 Petr Matousek 2018-05-14 11:54:47 UTC

External References:

https://security.libvirt.org/2018/0004.html

Comment 9 errata-xmlrpc 2018-05-14 16:11:38 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2018:1396 https://access.redhat.com/errata/RHSA-2018:1396

Comment 10 errata-xmlrpc 2018-06-19 04:56:08 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 6

Via RHSA-2018:1929 https://access.redhat.com/errata/RHSA-2018:1929