CVE-2019-20485 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-20485 Interim 1 7 2025-02-17T01:46:58Z current 2021-05-30T14:34:18Z 2025-02-17T01:46:58Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-20485 qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, which allows attackers to cause a denial of service (API blockage). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 7 libvirt-4.5.0-36.el7 libvirt-admin-4.5.0-36.el7 libvirt-bash-completion-4.5.0-36.el7 libvirt-client-4.5.0-36.el7 libvirt-daemon-4.5.0-36.el7 libvirt-daemon-config-network-4.5.0-36.el7 libvirt-daemon-config-nwfilter-4.5.0-36.el7 libvirt-daemon-driver-interface-4.5.0-36.el7 libvirt-daemon-driver-lxc-4.5.0-36.el7 libvirt-daemon-driver-network-4.5.0-36.el7 libvirt-daemon-driver-nodedev-4.5.0-36.el7 libvirt-daemon-driver-nwfilter-4.5.0-36.el7 libvirt-daemon-driver-qemu-4.5.0-36.el7 libvirt-daemon-driver-secret-4.5.0-36.el7 libvirt-daemon-driver-storage-4.5.0-36.el7 libvirt-daemon-driver-storage-core-4.5.0-36.el7 libvirt-daemon-driver-storage-disk-4.5.0-36.el7 libvirt-daemon-driver-storage-gluster-4.5.0-36.el7 libvirt-daemon-driver-storage-iscsi-4.5.0-36.el7 libvirt-daemon-driver-storage-logical-4.5.0-36.el7 libvirt-daemon-driver-storage-mpath-4.5.0-36.el7 libvirt-daemon-driver-storage-rbd-4.5.0-36.el7 libvirt-daemon-driver-storage-scsi-4.5.0-36.el7 libvirt-daemon-kvm-4.5.0-36.el7 libvirt-daemon-lxc-4.5.0-36.el7 libvirt-devel-4.5.0-36.el7 libvirt-docs-4.5.0-36.el7 libvirt-libs-4.5.0-36.el7 libvirt-lock-sanlock-4.5.0-36.el7 libvirt-login-shell-4.5.0-36.el7 libvirt-nss-4.5.0-36.el7 libvirt-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-admin-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-bash-completion-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-client-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-config-network-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-config-nwfilter-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-driver-interface-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-driver-lxc-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-driver-network-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-driver-nodedev-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-driver-nwfilter-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-driver-qemu-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-driver-secret-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-driver-storage-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-driver-storage-core-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-driver-storage-disk-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-driver-storage-gluster-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-driver-storage-iscsi-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-driver-storage-logical-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-driver-storage-mpath-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-driver-storage-rbd-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-driver-storage-scsi-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-kvm-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-daemon-lxc-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-devel-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-docs-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-libs-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-lock-sanlock-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-login-shell-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 libvirt-nss-4.5.0-36.el7 as a component of SUSE Liberty Linux 7 qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, which allows attackers to cause a denial of service (API blockage). CVE-2019-20485 SUSE Liberty Linux 7:libvirt-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-admin-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-bash-completion-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-client-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-config-network-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-config-nwfilter-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-driver-interface-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-driver-lxc-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-driver-network-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-driver-nodedev-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-driver-nwfilter-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-driver-qemu-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-driver-secret-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-driver-storage-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-driver-storage-core-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-driver-storage-disk-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-driver-storage-gluster-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-driver-storage-iscsi-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-driver-storage-logical-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-driver-storage-mpath-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-driver-storage-rbd-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-driver-storage-scsi-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-kvm-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-daemon-lxc-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-devel-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-docs-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-libs-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-lock-sanlock-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-login-shell-4.5.0-36.el7 SUSE Liberty Linux 7:libvirt-nss-4.5.0-36.el7 moderate 2.7 AV:A/AC:L/Au:S/C:N/I:N/A:P 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H