Libvirt Security Notice: LSN-2020-0004
        ======================================

       Summary: Double free after running guest agent command to
                fetch interfaces
   Reported on: 20200808
  Published on: 20200930
      Fixed on: 20200930
   Reported by: Ilja Van Sprundel <ivansprundel@ioactive.com>
    Patched by: Ján Tomko <jtomko@redhat.com>
      See also: CVE-2020-25637

Description
-----------

If the guest agent produces an errorneous reply when listing the
interfaces libvirt will free a pointer twice

Impact
------

A malicious QEMU guest agent can trigger a libvirtd crash

Workaround
----------

Avoid quering the guest network interfaces, or disable use of the
QEMU guest agent for untrusted guests

Affected product
----------------

        Name: libvirt
  Repository: https://gitlab.com/libvirt/libvirt

      Branch: master
   Broken in: v1.2.14
   Broken in: v1.2.15
   Broken in: v1.2.16
   Broken in: v1.2.17
   Broken in: v1.2.18
   Broken in: v1.2.19
   Broken in: v1.2.20
   Broken in: v1.2.21
   Broken in: v1.3.0
   Broken in: v1.3.1
   Broken in: v1.3.2
   Broken in: v1.3.3
   Broken in: v1.3.4
   Broken in: v1.3.5
   Broken in: v2.0.0
   Broken in: v2.1.0
   Broken in: v2.2.0
   Broken in: v2.3.0
   Broken in: v2.4.0
   Broken in: v2.5.0
   Broken in: v3.0.0
   Broken in: v3.1.0
   Broken in: v3.2.0
   Broken in: v3.3.0
   Broken in: v3.4.0
   Broken in: v3.5.0
   Broken in: v3.6.0
   Broken in: v3.7.0
   Broken in: v3.8.0
   Broken in: v3.9.0
   Broken in: v3.10.0
   Broken in: v4.0.0
   Broken in: v4.1.0
   Broken in: v4.2.0
   Broken in: v4.3.0
   Broken in: v4.4.0
   Broken in: v4.5.0
   Broken in: v4.6.0
   Broken in: v4.7.0
   Broken in: v4.8.0
   Broken in: v4.9.0
   Broken in: v4.10.0
   Broken in: v5.0.0
   Broken in: v5.1.0
   Broken in: v5.2.0
   Broken in: v5.3.0
   Broken in: v5.4.0
   Broken in: v5.5.0
   Broken in: v5.6.0
   Broken in: v5.7.0
   Broken in: v5.8.0
   Broken in: v5.9.0
   Broken in: v5.10.0
   Broken in: v6.0.0
   Broken in: v6.1.0
   Broken in: v6.2.0
   Broken in: v6.3.0
   Broken in: v6.4.0
   Broken in: v6.5.0
   Broken in: v6.6.0
   Broken in: v6.7.0
    Fixed in: v6.8.0
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520
    Fixed by: a63b48c5ecef077bf0f909a85f453a605600cf05

      Branch: v1.2.14-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v1.2.15-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v1.2.16-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v1.2.17-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v1.2.18-maint
   Broken in: v1.2.18.1
   Broken in: v1.2.18.2
   Broken in: v1.2.18.3
   Broken in: v1.2.18.4
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v1.2.19-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v1.2.20-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v1.2.21-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v1.3.0-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v1.3.1-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v1.3.2-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v1.3.3-maint
   Broken in: v1.3.3.1
   Broken in: v1.3.3.2
   Broken in: v1.3.3.3
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v1.3.4-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v1.3.5-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v2.0-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v2.1-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v2.2-maint
   Broken in: v2.2.1
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v3.0-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v3.2-maint
   Broken in: v3.2.1
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v3.7-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v4.1-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v4.2-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v4.3-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v4.4-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v4.5-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v4.6-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v4.7-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v4.8-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v4.9-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v4.10-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v5.0-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v5.1-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v5.1.0-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v5.2-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520

      Branch: v5.3-maint
   Broken by: 0977b8aa071de550e1a013d35e2c72615e65d520