CVE-2018-1064

HIGH 7.5CVE-2018-1064 · Published 28/03/2018 · updated 17/06/2026

In short

CVE-2018-1064 is a HIGH (CVSS 7.5) vulnerability affecting libvirt (redhat).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 86.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
libvirt redhat	`≤ 4.1.0`	No fix yet

Description

libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent.

References

access.redhat.com/errata/RHSA-2018:1396
access.redhat.com/errata/RHSA-2018:1929
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
libvirt.org/git
lists.debian.org/debian-lts-announce/2018/03/msg00018.html · Mailing List
usn.ubuntu.com/3680-1
debian.org/security/2018/dsa-4137 · Third Party Advisory

More vulnerabilities in libvirt

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

libvirt

redhat

≤ 4.1.0

No fix yet

More vulnerabilities in libvirt

See all →