CVE-2019-3840 — NULL Pointer Dereference in Redhat Libvirt
Severity
6.3MEDIUMNVD
CNA5.8
EPSS
0.7%
top 27.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 27
Latest updateMay 14
Description
A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 1.8 | Impact: 4.0
Affected Packages4 packages
Patches
🔴Vulnerability Details
3GHSA▶
GHSA-rx4m-pcxc-jchp: A NULL pointer dereference flaw was discovered in libvirt before version 5↗2022-05-14
CVEList▶
CVE-2019-3840: A NULL pointer dereference flaw was discovered in libvirt before version 5↗2019-03-27
OSV▶
CVE-2019-3840: A NULL pointer dereference flaw was discovered in libvirt before version 5↗2019-03-27
📋Vendor Advisories
3💬Community
3Bugzilla▶
CVE-2019-3840 libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function [fedora-all]↗2019-01-10
Bugzilla▶
CVE-2019-3840 mingw-libvirt: libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function [fedora-all]↗2019-01-10
Bugzilla▶
CVE-2019-3840 libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function↗2019-01-10