CVE catalog

CVE-2018-5748

libvirt: CVE-2018-5748

[CVE catalog]

Severity
Low · CVSS 3.3CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
3.17% · Oct 25, 2026

qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibvirtsid12.8.0-1fixed
Debianlibvirtforky12.8.0-1fixed
Debianlibvirttrixie11.3.0-3+deb13u3fixed
Debianlibvirtbookworm9.0.0-4+deb12u2fixed
Ubuntulibvirt14.041.1.1-0ubuntu8vulnerable
Ubuntulibvirt14.041.1.1-0ubuntu9vulnerable
Ubuntulibvirt14.041.1.4-0ubuntu2vulnerable
Ubuntulibvirt14.041.1.4-0ubuntu3vulnerable
Ubuntulibvirt14.041.1.4-0ubuntu4vulnerable
Ubuntulibvirt14.041.1.4-0ubuntu5vulnerable
Ubuntulibvirt14.041.2.0-0ubuntu1vulnerable
Ubuntulibvirt14.041.2.0-0ubuntu2vulnerable
Ubuntulibvirt14.041.2.0-0ubuntu3vulnerable
Ubuntulibvirt14.041.2.1-0ubuntu1vulnerable
Ubuntulibvirt14.041.2.1-0ubuntu2vulnerable
Ubuntulibvirt14.041.2.1-0ubuntu3vulnerable
Ubuntulibvirt14.041.2.1-0ubuntu4vulnerable
Ubuntulibvirt14.041.2.1-0ubuntu5vulnerable
Ubuntulibvirt14.041.2.1-0ubuntu7vulnerable
Ubuntulibvirt14.041.2.1-0ubuntu8vulnerable
Ubuntulibvirt14.041.2.1-0ubuntu9vulnerable
Ubuntulibvirt14.041.2.1-0ubuntu10vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu1vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu2vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu3vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu4vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu5vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu6vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu7vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu8vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu9vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu10vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu11vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu12vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.1vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.2vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.4vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.5vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.6vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.7vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.8vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.9vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.10vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.12vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.14vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.16vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.17vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.20vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.21vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.22vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.23vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.25vulnerable
Ubuntulibvirt14.041.2.2-0ubuntu13.1.26fixed
Ubuntulibvirt16.041.2.16-2ubuntu11vulnerable
Ubuntulibvirt16.041.2.16-2ubuntu12vulnerable
Ubuntulibvirt16.041.2.16-2ubuntu13vulnerable
Ubuntulibvirt16.041.2.16-2ubuntu14vulnerable
Ubuntulibvirt16.041.2.21-2ubuntu1vulnerable
Ubuntulibvirt16.041.2.21-2ubuntu3vulnerable
Ubuntulibvirt16.041.2.21-2ubuntu4vulnerable
Ubuntulibvirt16.041.2.21-2ubuntu5vulnerable
Ubuntulibvirt16.041.2.21-2ubuntu7vulnerable
Ubuntulibvirt16.041.2.21-2ubuntu8vulnerable
Ubuntulibvirt16.041.2.21-2ubuntu9vulnerable
Ubuntulibvirt16.041.2.21-2ubuntu10vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu1vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu2vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu3vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu4vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu6vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu9vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu10vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu10.1vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu10.2vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu10.3vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu10.5vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu10.6vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu10.7vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu10.8vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu10.10vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu10.11vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu10.12vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu10.13vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu10.14vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu10.15vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu10.17vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu10.18vulnerable
Ubuntulibvirt16.041.3.1-1ubuntu10.19fixed
Suselibvirtlinux enterprise desktop 12 sp22.0.0-27.29.1fixed
Suselibvirtlinux enterprise server for raspberry pi 12 sp22.0.0-27.29.1fixed
Suselibvirtlinux enterprise software development kit 12 sp22.0.0-27.29.1fixed
Suselibvirtlinux enterprise server 12 sp22.0.0-27.29.1fixed
Suselibvirtlinux enterprise server for sap applications 12 sp22.0.0-27.29.1fixed
Suselibvirtlinux enterprise workstation extension 12 sp22.0.0-27.29.1fixed
Suselibvirtlinux enterprise desktop 12 sp33.3.0-5.13.1fixed
Suselibvirtlinux enterprise software development kit 12 sp33.3.0-5.13.1fixed
Suselibvirtlinux enterprise server 12 sp33.3.0-5.13.1fixed
Suselibvirtlinux enterprise server for sap applications 12 sp33.3.0-5.13.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibvirtsourcesid4.0.0-1not yet assignedNot reported[887700]
Debianlibvirtsourceforky4.0.0-1not yet assignedNot reported[887700]
Debianlibvirtsourcetrixie4.0.0-1not yet assignedNot reported[887700]
Debianlibvirtsourcebookworm4.0.0-1not yet assignedNot reported[887700]
Ubuntulibvirtdeb14.041.2.2-0ubuntu13.1.26Not reportedUBUNTU-CVE-2018-5748Not reported
Ubuntulibvirtdeb16.041.3.1-1ubuntu10.19Not reportedUBUNTU-CVE-2018-5748Not reported
Suselibvirtrpmlinux enterprise desktop 12 sp22.0.0-27.29.1Not reportedSUSE-SU-2018:0385-1Not reported
Suselibvirtrpmlinux enterprise server for raspberry pi 12 sp22.0.0-27.29.1Not reportedSUSE-SU-2018:0385-1Not reported
Suselibvirtrpmlinux enterprise software development kit 12 sp22.0.0-27.29.1Not reportedSUSE-SU-2018:0385-1Not reported
Suselibvirtrpmlinux enterprise server 12 sp22.0.0-27.29.1Not reportedSUSE-SU-2018:0385-1Not reported
Suselibvirtrpmlinux enterprise server for sap applications 12 sp22.0.0-27.29.1Not reportedSUSE-SU-2018:0385-1Not reported
Suselibvirtrpmlinux enterprise workstation extension 12 sp22.0.0-27.29.1Not reportedSUSE-SU-2018:0385-1Not reported
Suselibvirtrpmlinux enterprise desktop 12 sp33.3.0-5.13.1Not reportedSUSE-SU-2018:0279-1Not reported
Suselibvirtrpmlinux enterprise software development kit 12 sp33.3.0-5.13.1Not reportedSUSE-SU-2018:0279-1Not reported
Suselibvirtrpmlinux enterprise server 12 sp33.3.0-5.13.1Not reportedSUSE-SU-2018:0279-1Not reported
Suselibvirtrpmlinux enterprise server for sap applications 12 sp33.3.0-5.13.1Not reportedSUSE-SU-2018:0279-1Not reported

[Debian bug #887700]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt0]Fixed

    Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · all · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · all · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · all · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · all · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · all · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · all · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 4.0.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

Next results

Observed:

References