A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash.
{ "ubuntu_priority": "low", "availability": "No subscription required", "binaries": [ { "binary_name": "libnss-libvirt", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libnss-libvirt-dbgsym", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-bin", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-clients", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-clients-dbgsym", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-daemon", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-daemon-dbgsym", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-daemon-driver-storage-gluster", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-daemon-driver-storage-gluster-dbgsym", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-daemon-driver-storage-rbd", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-daemon-driver-storage-rbd-dbgsym", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-daemon-driver-storage-sheepdog", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-daemon-driver-storage-sheepdog-dbgsym", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-daemon-driver-storage-zfs", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-daemon-driver-storage-zfs-dbgsym", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-daemon-system", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-daemon-system-dbgsym", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-dev", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-doc", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-sanlock", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-sanlock-dbgsym", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-wireshark", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt-wireshark-dbgsym", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt0", "binary_version": "4.0.0-1ubuntu8.21" }, { "binary_name": "libvirt0-dbgsym", "binary_version": "4.0.0-1ubuntu8.21" } ] }
{ "ubuntu_priority": "low", "availability": "No subscription required", "binaries": [ { "binary_name": "libnss-libvirt", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libnss-libvirt-dbgsym", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-clients", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-clients-dbgsym", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-dbgsym", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-driver-lxc", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-driver-lxc-dbgsym", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-driver-qemu", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-driver-qemu-dbgsym", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-driver-storage-gluster", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-driver-storage-gluster-dbgsym", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-driver-storage-rbd", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-driver-storage-rbd-dbgsym", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-driver-storage-zfs", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-driver-storage-zfs-dbgsym", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-driver-vbox", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-driver-vbox-dbgsym", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-driver-xen", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-driver-xen-dbgsym", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-system", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-system-dbgsym", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-system-systemd", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-daemon-system-sysv", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-dev", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-doc", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-sanlock", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-sanlock-dbgsym", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-wireshark", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt-wireshark-dbgsym", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt0", "binary_version": "6.0.0-0ubuntu8.16" }, { "binary_name": "libvirt0-dbgsym", "binary_version": "6.0.0-0ubuntu8.16" } ] }
{ "ubuntu_priority": "low", "availability": "No subscription required", "binaries": [ { "binary_name": "libnss-libvirt", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libnss-libvirt-dbgsym", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-clients", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-clients-dbgsym", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-config-network", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-config-nwfilter", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-dbgsym", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-driver-lxc", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-driver-lxc-dbgsym", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-driver-qemu", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-driver-qemu-dbgsym", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-driver-storage-gluster", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-driver-storage-gluster-dbgsym", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-driver-storage-iscsi-direct", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-driver-storage-iscsi-direct-dbgsym", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-driver-storage-rbd", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-driver-storage-rbd-dbgsym", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-driver-storage-zfs", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-driver-storage-zfs-dbgsym", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-driver-vbox", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-driver-vbox-dbgsym", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-driver-xen", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-driver-xen-dbgsym", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-system", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-system-systemd", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-daemon-system-sysv", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-dev", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-doc", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-login-shell", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-login-shell-dbgsym", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-sanlock", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-sanlock-dbgsym", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-wireshark", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt-wireshark-dbgsym", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt0", "binary_version": "7.6.0-0ubuntu3" }, { "binary_name": "libvirt0-dbgsym", "binary_version": "7.6.0-0ubuntu3" } ] }