CVE-2019-3840

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 5.0.0

Description A NULL pointer dereference flaw was discovered in the way libvirt gets interface information through the QEMU agent. This issue can be exploited by an attacker in a guest VM to crash libvirtd, causing a denial of service. The flaw is related to the virJSONValueObjectHasKey() function.

Recommendations For versions prior to 5.0.0, update to version 5.0.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the QEMU agent to minimize the risk of exploitation.