{"id":"CVE-2018-5748","details":"qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply.","modified":"2026-10-24T10:30:24.252201648Z","published":"2018-01-25T16:29:00.400Z","related":["SUSE-SU-2018:0279-1","SUSE-SU-2018:0385-1","SUSE-SU-2018:0838-1","SUSE-SU-2018:1295-1","SUSE-SU-2018:2082-1","SUSE-SU-2018:2141-1","openSUSE-SU-2024:11008-1"],"database_specific":{},"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/102825"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:1396"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:1929"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2018/03/msg00018.html"},{"type":"ADVISORY","url":"https://www.debian.org/security/2018/dsa-4137"},{"type":"FIX","url":"https://www.redhat.com/archives/libvir-list/2018-January/msg00527.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/libvirt/libvirt","events":[{"introduced":"501563469e67ea54be4ec1b3b84d4f0405e90ea4"},{"last_affected":"03eadc86fc5cdadbc4ab18123d820b6e4e321abd"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","cpe":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*"},{"range":[{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","cpe":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","range":[{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","range":[{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING"},{"range":[{"introduced":"8.0"},{"last_affected":"8.0"}],"source":"CPE_STRING","cpe":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","range":[{"introduced":"9.0"},{"last_affected":"9.0"}]},{"cpe":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","range":[{"introduced":"6.0"},{"last_affected":"6.0"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","range":[{"introduced":"6.0"},{"last_affected":"6.0"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","range":[{"introduced":"6.0"},{"last_affected":"6.0"}]},{"range":[{"introduced":"7.6"},{"last_affected":"7.6"}],"source":"CPE_STRING","cpe":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","range":[{"introduced":"7.6"},{"last_affected":"7.6"}]},{"range":[{"introduced":"7.6"},{"last_affected":"7.6"}],"source":"CPE_STRING","cpe":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*"},{"range":[{"introduced":"7.5"},{"last_affected":"7.5"}],"source":"CPE_STRING","cpe":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*"}]}}],"versions":["6.0","7.0","7.5","7.6","8.0","9.0","v7.5.0","CVE-2021-3631","v7.5.0-rc2","v7.5.0-rc1","v7.4.0","v7.4.0-rc2","v7.4.0-rc1","v7.3.0","v7.3.0-rc2","v7.3.0-rc1","v7.2.0","v7.2.0-rc2","v7.2.0-rc1","v7.1.0","v7.1.0-rc2","v7.1.0-rc1","v7.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5748.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}