[Secure-testing-team] Bug#887700: libvirt: CVE-2018-5748: resource exhaustion via qemuMonitorIORead() method

[Salvatore Bonaccorso]

Source: libvirt
Version: 1.2.9-9
Severity: important
Tags: security upstream

Hi,

the following vulnerability was published for libvirt.

CVE-2018-5748[0]:
resource exhaustion via qemuMonitorIORead() method

Further reference in the Red Hat bug [1].

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2018-5748
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5748
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1528396

Please adjust the affected versions in the BTS as needed, please
double-check.

Regards,
Salvatore