{"id":"CVE-2018-5748","details":"qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply.","modified":"2026-07-08T16:40:59.671820Z","published":"2018-01-25T16:29:00.400Z","related":["SUSE-SU-2018:0279-1","SUSE-SU-2018:0385-1","SUSE-SU-2018:0838-1","SUSE-SU-2018:1295-1","SUSE-SU-2018:2082-1","SUSE-SU-2018:2141-1","openSUSE-SU-2024:11008-1"],"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/102825"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:1396"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:1929"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2018/03/msg00018.html"},{"type":"ADVISORY","url":"https://www.debian.org/security/2018/dsa-4137"},{"type":"FIX","url":"https://www.redhat.com/archives/libvir-list/2018-January/msg00527.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/libvirt/libvirt","events":[{"introduced":"501563469e67ea54be4ec1b3b84d4f0405e90ea4"},{"last_affected":"03eadc86fc5cdadbc4ab18123d820b6e4e321abd"}],"database_specific":{"cpe":["cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"},{"introduced":"8.0"},{"last_affected":"8.0"},{"introduced":"9.0"},{"last_affected":"9.0"},{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.6"},{"last_affected":"7.6"},{"introduced":"7.5"},{"last_affected":"7.5"}],"source":"CPE_STRING"}}],"versions":["6.0","7.0","7.5","7.6","8.0","9.0","v7.5.0","CVE-2021-3631","v7.5.0-rc2","v7.5.0-rc1","v7.4.0","v7.4.0-rc2","v7.4.0-rc1","v7.3.0","v7.3.0-rc2","v7.3.0-rc1","v7.2.0","v7.2.0-rc2","v7.2.0-rc1","v7.1.0","v7.1.0-rc2","v7.1.0-rc1","v7.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5748.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}