USN-3680-1: libvirt vulnerability and update
Ken Johnson and Jann Horn independently discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via sidechannel attacks. An attacker in the guest could use this to expose sensitive guest information, including kernel memory. This update allows libvirt to expose new CPU features added by microcode updates to guests. (CVE-2018-3639) Daniel P. Berrange discovered that libvirt incorrectly handled the QEMU guest agent. An attacker could possibly use this issue to consume resources, leading to a denial of service. (CVE-2018-1064)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libvirt-binto a version that resolves this vulnerability.Fixed in 4.0.0-1ubuntu8.2 - Upgrade
Upgrade
ubuntu/libvirt0to a version that resolves this vulnerability.Fixed in 4.0.0-1ubuntu8.2 - Upgrade
Upgrade
ubuntu/libvirt-binto a version that resolves this vulnerability.Fixed in 3.6.0-1ubuntu6.8 - Upgrade
Upgrade
ubuntu/libvirt0to a version that resolves this vulnerability.Fixed in 3.6.0-1ubuntu6.8 - Upgrade
Upgrade
ubuntu/libvirt-binto a version that resolves this vulnerability.Fixed in 1.3.1-1ubuntu10.24 - Upgrade
Upgrade
ubuntu/libvirt0to a version that resolves this vulnerability.Fixed in 1.3.1-1ubuntu10.24 - Upgrade
Upgrade
ubuntu/libvirt-binto a version that resolves this vulnerability.Fixed in 1.2.2-0ubuntu13.1.27 - Upgrade
Upgrade
ubuntu/libvirt0to a version that resolves this vulnerability.Fixed in 1.2.2-0ubuntu13.1.27 - Upgrade
Upgrade
libvirtto a version that resolves this vulnerability.Patch USN-3680-1
Event History
Frequently Asked Questions
What is the vulnerability ID for this update?
The vulnerability ID for this update is CVE-2018-1064.
What is the severity of the vulnerability?
The severity of the vulnerability is not specified.
How does the vulnerability work?
The vulnerability allows unauthorized memory reads via sidechannel attacks on microprocessors utilizing speculative execution of a memory read.
What is the affected software?
The affected software is libvirt-bin and libvirt0 on Ubuntu 14.04, 16.04, 17.10, and 18.04.
How do I fix the vulnerability?
To fix the vulnerability, update the libvirt-bin and libvirt0 packages to version 4.0.0-1ubuntu8.2, 3.6.0-1ubuntu6.8, or 1.3.1-1ubuntu10.24 depending on the Ubuntu version.