ID de Prueba:	1.3.6.1.4.1.25623.1.1.4.2018.0385.1
Categoría:	SuSE Local Security Checks
Título:	SUSE: Security Advisory (SUSE-SU-2018:0385-1)
Resumen:	The remote host is missing an update for the 'libvirt' package(s) announced via the SUSE-SU-2018:0385-1 advisory.
Descripción:	Summary: The remote host is missing an update for the 'libvirt' package(s) announced via the SUSE-SU-2018:0385-1 advisory. Vulnerability Insight: This update for libvirt provides several fixes. This security issue was fixed: - CVE-2018-5748: Prevent resource exhaustion via qemuMonitorIORead() method which allowed to cause DoS (bsc#1076500). These security issues were fixed: - Add a qemu hook script providing functionality similar to Xen's block-dmmd script. (fate#324177) - schema: Make disk driver name attribute optional. (bsc#1073973) - virt-create-rootfs: Handle all SLE 12 versions. (bsc#1072887) - libvirt-guests: Fix the 'stop' operation when action is 'suspend'. (bsc#1070130) Affected Software/OS: 'libvirt' package(s) on SUSE Linux Enterprise Desktop 12-SP2, SUSE Linux Enterprise Server 12-SP2, SUSE Linux Enterprise Server for Raspberry Pi 12-SP2, SUSE Linux Enterprise Software Development Kit 12-SP2, SUSE Linux Enterprise Workstation Extension 12-SP2. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-5748 BugTraq ID: 102825 http://www.securityfocus.com/bid/102825 Debian Security Information: DSA-4137 (Google Search) https://www.debian.org/security/2018/dsa-4137 https://lists.debian.org/debian-lts-announce/2018/03/msg00018.html https://www.redhat.com/archives/libvir-list/2018-January/msg00527.html RedHat Security Advisories: RHSA-2018:1396 https://access.redhat.com/errata/RHSA-2018:1396 RedHat Security Advisories: RHSA-2018:1929 https://access.redhat.com/errata/RHSA-2018:1929
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.