libvirt.so is vulnerable to denial of service (DoS) attack. The attack is possible because it does not limit the size of buffer while reading data from Qemu monitor.
www.securityfocus.com/bid/102825
access.redhat.com/errata/RHSA-2018:1396
access.redhat.com/errata/RHSA-2018:1929
bugzilla.redhat.com/show_bug.cgi?id=1528396
github.com/libvirt/libvirt/commit/bc251ea91bcfddd2622fce6bce701a438b2e7276
lists.debian.org/debian-lts-announce/2018/03/msg00018.html
www.debian.org/security/2018/dsa-4137
www.redhat.com/archives/libvir-list/2018-January/msg00527.html