Test ID:	1.3.6.1.4.1.25623.1.1.4.2018.2082.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2018:2082-1)
Summary:	The remote host is missing an update for the 'libvirt' package(s) announced via the SUSE-SU-2018:2082-1 advisory.
Description:	Summary: The remote host is missing an update for the 'libvirt' package(s) announced via the SUSE-SU-2018:2082-1 advisory. Vulnerability Insight: This update for libvirt fixes the following issues: Security issues fixed: - CVE-2017-5715: Fixes for speculative side channel attacks aka 'SpectreAttack' (var2) (bsc#1079869). - CVE-2018-3639: Add support for 'ssbd' and 'virt-ssbd' CPUID feature bits to address V4 Speculative Store Bypass aka 'Memory Disambiguation' (bsc#1092885). - CVE-2018-1064: Fix denial of service problem during reading from guest agent (bsc#1083625). - CVE-2018-5748: Fix resource exhaustion via qemuMonitorIORead() method (bsc#1076500). Affected Software/OS: 'libvirt' package(s) on SUSE Linux Enterprise Server 12-SP1, SUSE Linux Enterprise Server for SAP 12-SP1. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-5715 BugTraq ID: 102376 http://www.securityfocus.com/bid/102376 Bugtraq: 20190624 [SECURITY] [DSA 4469-1] libvirt security update (Google Search) https://seclists.org/bugtraq/2019/Jun/36 Bugtraq: 20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu (Google Search) https://seclists.org/bugtraq/2019/Nov/16 CERT/CC vulnerability note: VU#180049 https://www.kb.cert.org/vuls/id/180049 CERT/CC vulnerability note: VU#584653 http://www.kb.cert.org/vuls/id/584653 Cisco Security Advisory: 20180104 CPU Side-Channel Information Disclosure Vulnerabilities https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel Debian Security Information: DSA-4120 (Google Search) https://www.debian.org/security/2018/dsa-4120 Debian Security Information: DSA-4187 (Google Search) https://www.debian.org/security/2018/dsa-4187 Debian Security Information: DSA-4188 (Google Search) https://www.debian.org/security/2018/dsa-4188 Debian Security Information: DSA-4213 (Google Search) https://www.debian.org/security/2018/dsa-4213 https://www.exploit-db.com/exploits/43427/ FreeBSD Security Advisory: FreeBSD-SA-19:26 https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc https://security.gentoo.org/glsa/201810-06 http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html https://spectreattack.com/ https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html https://lists.debian.org/debian-lts-announce/2020/03/msg00025.html https://lists.debian.org/debian-lts-announce/2021/08/msg00019.html RedHat Security Advisories: RHSA-2018:0292 https://access.redhat.com/errata/RHSA-2018:0292 http://www.securitytracker.com/id/1040071 SuSE Security Announcement: SUSE-SU-2018:0006 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html SuSE Security Announcement: SUSE-SU-2018:0007 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html SuSE Security Announcement: SUSE-SU-2018:0008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html SuSE Security Announcement: SUSE-SU-2018:0009 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html SuSE Security Announcement: SUSE-SU-2018:0010 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html SuSE Security Announcement: SUSE-SU-2018:0011 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html SuSE Security Announcement: SUSE-SU-2018:0012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html SuSE Security Announcement: SUSE-SU-2018:0019 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html SuSE Security Announcement: SUSE-SU-2018:0020 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html SuSE Security Announcement: openSUSE-SU-2018:0013 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html SuSE Security Announcement: openSUSE-SU-2018:0022 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html SuSE Security Announcement: openSUSE-SU-2018:0023 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html https://usn.ubuntu.com/usn/usn-3516-1/ https://usn.ubuntu.com/3531-1/ https://usn.ubuntu.com/3531-3/ https://usn.ubuntu.com/3540-2/ https://usn.ubuntu.com/3541-2/ https://usn.ubuntu.com/3542-2/ https://usn.ubuntu.com/3549-1/ https://usn.ubuntu.com/3560-1/ https://usn.ubuntu.com/3561-1/ https://usn.ubuntu.com/3580-1/ https://usn.ubuntu.com/3581-1/ https://usn.ubuntu.com/3581-2/ https://usn.ubuntu.com/3582-1/ https://usn.ubuntu.com/3582-2/ https://usn.ubuntu.com/3594-1/ https://usn.ubuntu.com/3597-1/ https://usn.ubuntu.com/3597-2/ https://usn.ubuntu.com/3620-2/ https://usn.ubuntu.com/3690-1/ https://usn.ubuntu.com/3777-3/ Common Vulnerability Exposure (CVE) ID: CVE-2018-1064 Debian Security Information: DSA-4137 (Google Search) https://www.debian.org/security/2018/dsa-4137 https://lists.debian.org/debian-lts-announce/2018/03/msg00018.html RedHat Security Advisories: RHSA-2018:1396 https://access.redhat.com/errata/RHSA-2018:1396 RedHat Security Advisories: RHSA-2018:1929 https://access.redhat.com/errata/RHSA-2018:1929 https://usn.ubuntu.com/3680-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-3639 BugTraq ID: 104232 http://www.securityfocus.com/bid/104232 Cert/CC Advisory: TA18-141A https://www.us-cert.gov/ncas/alerts/TA18-141A Cisco Security Advisory: 20180522 CPU Side-Channel Information Disclosure Vulnerabilities: May 2018 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180521-cpusidechannel http://support.lenovo.com/us/en/solutions/LEN-22133 http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html http://xenbits.xen.org/xsa/advisory-263.html https://cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-505225.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 https://nvidia.custhelp.com/app/answers/detail/a_id/4787 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180012 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0004 https://security.netapp.com/advisory/ntap-20180521-0001/ https://support.citrix.com/article/CTX235225 https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03850en_us https://support.oracle.com/knowledge/Sun%20Microsystems/2481872_1.html https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0006 https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html https://www.synology.com/support/security/Synology_SA_18_23 Debian Security Information: DSA-4210 (Google Search) https://www.debian.org/security/2018/dsa-4210 Debian Security Information: DSA-4273 (Google Search) https://www.debian.org/security/2018/dsa-4273 https://www.exploit-db.com/exploits/44695/ https://bugs.chromium.org/p/project-zero/issues/detail?id=1528 https://www.oracle.com/security-alerts/cpujul2020.html https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html https://lists.debian.org/debian-lts-announce/2018/07/msg00038.html https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html http://www.openwall.com/lists/oss-security/2020/06/10/2 http://www.openwall.com/lists/oss-security/2020/06/10/5 http://www.openwall.com/lists/oss-security/2020/06/10/1 RedHat Security Advisories: RHSA-2018:1629 https://access.redhat.com/errata/RHSA-2018:1629 RedHat Security Advisories: RHSA-2018:1630 https://access.redhat.com/errata/RHSA-2018:1630 RedHat Security Advisories: RHSA-2018:1632 https://access.redhat.com/errata/RHSA-2018:1632 RedHat Security Advisories: RHSA-2018:1633 https://access.redhat.com/errata/RHSA-2018:1633 RedHat Security Advisories: RHSA-2018:1635 https://access.redhat.com/errata/RHSA-2018:1635 RedHat Security Advisories: RHSA-2018:1636 https://access.redhat.com/errata/RHSA-2018:1636 RedHat Security Advisories: RHSA-2018:1637 https://access.redhat.com/errata/RHSA-2018:1637 RedHat Security Advisories: RHSA-2018:1638 https://access.redhat.com/errata/RHSA-2018:1638 RedHat Security Advisories: RHSA-2018:1639 https://access.redhat.com/errata/RHSA-2018:1639 RedHat Security Advisories: RHSA-2018:1640 https://access.redhat.com/errata/RHSA-2018:1640 RedHat Security Advisories: RHSA-2018:1641 https://access.redhat.com/errata/RHSA-2018:1641 RedHat Security Advisories: RHSA-2018:1642 https://access.redhat.com/errata/RHSA-2018:1642 RedHat Security Advisories: RHSA-2018:1643 https://access.redhat.com/errata/RHSA-2018:1643 RedHat Security Advisories: RHSA-2018:1644 https://access.redhat.com/errata/RHSA-2018:1644 RedHat Security Advisories: RHSA-2018:1645 https://access.redhat.com/errata/RHSA-2018:1645 RedHat Security Advisories: RHSA-2018:1646 https://access.redhat.com/errata/RHSA-2018:1646 RedHat Security Advisories: RHSA-2018:1647 https://access.redhat.com/errata/RHSA-2018:1647 RedHat Security Advisories: RHSA-2018:1648 https://access.redhat.com/errata/RHSA-2018:1648 RedHat Security Advisories: RHSA-2018:1649 https://access.redhat.com/errata/RHSA-2018:1649 RedHat Security Advisories: RHSA-2018:1650 https://access.redhat.com/errata/RHSA-2018:1650 RedHat Security Advisories: RHSA-2018:1651 https://access.redhat.com/errata/RHSA-2018:1651 RedHat Security Advisories: RHSA-2018:1652 https://access.redhat.com/errata/RHSA-2018:1652 RedHat Security Advisories: RHSA-2018:1653 https://access.redhat.com/errata/RHSA-2018:1653 RedHat Security Advisories: RHSA-2018:1654 https://access.redhat.com/errata/RHSA-2018:1654 RedHat Security Advisories: RHSA-2018:1655 https://access.redhat.com/errata/RHSA-2018:1655 RedHat Security Advisories: RHSA-2018:1656 https://access.redhat.com/errata/RHSA-2018:1656 RedHat Security Advisories: RHSA-2018:1657 https://access.redhat.com/errata/RHSA-2018:1657 RedHat Security Advisories: RHSA-2018:1658 https://access.redhat.com/errata/RHSA-2018:1658 RedHat Security Advisories: RHSA-2018:1659 https://access.redhat.com/errata/RHSA-2018:1659 RedHat Security Advisories: RHSA-2018:1660 https://access.redhat.com/errata/RHSA-2018:1660 RedHat Security Advisories: RHSA-2018:1661 https://access.redhat.com/errata/RHSA-2018:1661 RedHat Security Advisories: RHSA-2018:1662 https://access.redhat.com/errata/RHSA-2018:1662 RedHat Security Advisories: RHSA-2018:1663 https://access.redhat.com/errata/RHSA-2018:1663 RedHat Security Advisories: RHSA-2018:1664 https://access.redhat.com/errata/RHSA-2018:1664 RedHat Security Advisories: RHSA-2018:1665 https://access.redhat.com/errata/RHSA-2018:1665 RedHat Security Advisories: RHSA-2018:1666 https://access.redhat.com/errata/RHSA-2018:1666 RedHat Security Advisories: RHSA-2018:1667 https://access.redhat.com/errata/RHSA-2018:1667 RedHat Security Advisories: RHSA-2018:1668 https://access.redhat.com/errata/RHSA-2018:1668 RedHat Security Advisories: RHSA-2018:1669 https://access.redhat.com/errata/RHSA-2018:1669 RedHat Security Advisories: RHSA-2018:1674 https://access.redhat.com/errata/RHSA-2018:1674 RedHat Security Advisories: RHSA-2018:1675 https://access.redhat.com/errata/RHSA-2018:1675 RedHat Security Advisories: RHSA-2018:1676 https://access.redhat.com/errata/RHSA-2018:1676 RedHat Security Advisories: RHSA-2018:1686 https://access.redhat.com/errata/RHSA-2018:1686 RedHat Security Advisories: RHSA-2018:1688 https://access.redhat.com/errata/RHSA-2018:1688 RedHat Security Advisories: RHSA-2018:1689 https://access.redhat.com/errata/RHSA-2018:1689 RedHat Security Advisories: RHSA-2018:1690 https://access.redhat.com/errata/RHSA-2018:1690 RedHat Security Advisories: RHSA-2018:1696 https://access.redhat.com/errata/RHSA-2018:1696 RedHat Security Advisories: RHSA-2018:1710 https://access.redhat.com/errata/RHSA-2018:1710 RedHat Security Advisories: RHSA-2018:1711 https://access.redhat.com/errata/RHSA-2018:1711 RedHat Security Advisories: RHSA-2018:1737 https://access.redhat.com/errata/RHSA-2018:1737 RedHat Security Advisories: RHSA-2018:1738 https://access.redhat.com/errata/RHSA-2018:1738 RedHat Security Advisories: RHSA-2018:1826 https://access.redhat.com/errata/RHSA-2018:1826 RedHat Security Advisories: RHSA-2018:1854 https://access.redhat.com/errata/RHSA-2018:1854 RedHat Security Advisories: RHSA-2018:1965 https://access.redhat.com/errata/RHSA-2018:1965 RedHat Security Advisories: RHSA-2018:1967 https://access.redhat.com/errata/RHSA-2018:1967 RedHat Security Advisories: RHSA-2018:1997 https://access.redhat.com/errata/RHSA-2018:1997 RedHat Security Advisories: RHSA-2018:2001 https://access.redhat.com/errata/RHSA-2018:2001 RedHat Security Advisories: RHSA-2018:2003 https://access.redhat.com/errata/RHSA-2018:2003 RedHat Security Advisories: RHSA-2018:2006 https://access.redhat.com/errata/RHSA-2018:2006 RedHat Security Advisories: RHSA-2018:2060 https://access.redhat.com/errata/RHSA-2018:2060 RedHat Security Advisories: RHSA-2018:2161 https://access.redhat.com/errata/RHSA-2018:2161 RedHat Security Advisories: RHSA-2018:2162 https://access.redhat.com/errata/RHSA-2018:2162 RedHat Security Advisories: RHSA-2018:2164 https://access.redhat.com/errata/RHSA-2018:2164 RedHat Security Advisories: RHSA-2018:2171 https://access.redhat.com/errata/RHSA-2018:2171 RedHat Security Advisories: RHSA-2018:2172 https://access.redhat.com/errata/RHSA-2018:2172 RedHat Security Advisories: RHSA-2018:2216 https://access.redhat.com/errata/RHSA-2018:2216 RedHat Security Advisories: RHSA-2018:2228 https://access.redhat.com/errata/RHSA-2018:2228 RedHat Security Advisories: RHSA-2018:2246 https://access.redhat.com/errata/RHSA-2018:2246 RedHat Security Advisories: RHSA-2018:2250 https://access.redhat.com/errata/RHSA-2018:2250 RedHat Security Advisories: RHSA-2018:2258 https://access.redhat.com/errata/RHSA-2018:2258 RedHat Security Advisories: RHSA-2018:2289 https://access.redhat.com/errata/RHSA-2018:2289 RedHat Security Advisories: RHSA-2018:2309 https://access.redhat.com/errata/RHSA-2018:2309 RedHat Security Advisories: RHSA-2018:2328 https://access.redhat.com/errata/RHSA-2018:2328 RedHat Security Advisories: RHSA-2018:2363 https://access.redhat.com/errata/RHSA-2018:2363 RedHat Security Advisories: RHSA-2018:2364 https://access.redhat.com/errata/RHSA-2018:2364 RedHat Security Advisories: RHSA-2018:2387 https://access.redhat.com/errata/RHSA-2018:2387 RedHat Security Advisories: RHSA-2018:2394 https://access.redhat.com/errata/RHSA-2018:2394 RedHat Security Advisories: RHSA-2018:2396 https://access.redhat.com/errata/RHSA-2018:2396 RedHat Security Advisories: RHSA-2018:2948 https://access.redhat.com/errata/RHSA-2018:2948 RedHat Security Advisories: RHSA-2018:3396 https://access.redhat.com/errata/RHSA-2018:3396 RedHat Security Advisories: RHSA-2018:3397 https://access.redhat.com/errata/RHSA-2018:3397 RedHat Security Advisories: RHSA-2018:3398 https://access.redhat.com/errata/RHSA-2018:3398 RedHat Security Advisories: RHSA-2018:3399 https://access.redhat.com/errata/RHSA-2018:3399 RedHat Security Advisories: RHSA-2018:3400 https://access.redhat.com/errata/RHSA-2018:3400 RedHat Security Advisories: RHSA-2018:3401 https://access.redhat.com/errata/RHSA-2018:3401 RedHat Security Advisories: RHSA-2018:3402 https://access.redhat.com/errata/RHSA-2018:3402 RedHat Security Advisories: RHSA-2018:3407 https://access.redhat.com/errata/RHSA-2018:3407 RedHat Security Advisories: RHSA-2018:3423 https://access.redhat.com/errata/RHSA-2018:3423 RedHat Security Advisories: RHSA-2018:3424 https://access.redhat.com/errata/RHSA-2018:3424 RedHat Security Advisories: RHSA-2018:3425 https://access.redhat.com/errata/RHSA-2018:3425 RedHat Security Advisories: RHSA-2019:0148 https://access.redhat.com/errata/RHSA-2019:0148 RedHat Security Advisories: RHSA-2019:1046 https://access.redhat.com/errata/RHSA-2019:1046 http://www.securitytracker.com/id/1040949 http://www.securitytracker.com/id/1042004 SuSE Security Announcement: openSUSE-SU-2019:1438 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html SuSE Security Announcement: openSUSE-SU-2019:1439 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html SuSE Security Announcement: openSUSE-SU-2020:1325 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html https://usn.ubuntu.com/3651-1/ https://usn.ubuntu.com/3652-1/ https://usn.ubuntu.com/3653-1/ https://usn.ubuntu.com/3653-2/ https://usn.ubuntu.com/3654-1/ https://usn.ubuntu.com/3654-2/ https://usn.ubuntu.com/3655-1/ https://usn.ubuntu.com/3655-2/ https://usn.ubuntu.com/3679-1/ https://usn.ubuntu.com/3756-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-5748 BugTraq ID: 102825 http://www.securityfocus.com/bid/102825 https://www.redhat.com/archives/libvir-list/2018-January/msg00527.html
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.