An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-develUpgrade libvirt-nssUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-networkUpgrade libvirt-client-qemuUpgrade libvirt-daemonUpgrade libvirt-docsUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-interfaceUpgrade libvirtUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-logUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-proxy | May 8, 2024 | Mar 11, 2024 |
| Amazon Linux Ami 2 | — | Upgrade libvirt-develUpgrade libvirt-nssUpgrade libvirt-daemon-config-networkUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-bash-completionUpgrade libvirt-daemon-lxcUpgrade libvirt-libsUpgrade libvirt-docsUpgrade libvirt-lock-sanlockUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirtUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-network | Apr 19, 2024 | Mar 11, 2024 |
| Debian | — | Upgrade libvirt | Apr 3, 2024 | Mar 11, 2024 |
| Oracle_linux | — | Upgrade libguestfs-gobject-develUpgrade libvirt-nssUpgrade nbdkit-tar-pluginUpgrade libvirt-daemon-kvmUpgrade nbdkit-xz-filterUpgrade libguestfs-toolsUpgrade swtpm-tools-pkcs11Upgrade libvirt-daemon-commonUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-docsUpgrade libvirt-adminUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-mpathUpgrade sgabios-binUpgrade libtpmsUpgrade virt-v2v-man-pages-ukUpgrade virt-v2v-man-pages-jaUpgrade hivex-develUpgrade libguestfs-man-pages-ukUpgrade seavgabios-binUpgrade libnbdUpgrade libvirt-wiresharkUpgrade libnbd-develUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-qemuUpgrade libnbd-bash-completionUpgrade libvirt-client-qemuUpgrade libvirt-daemonUpgrade nbdkit-example-pluginsUpgrade libguestfs-javadocUpgrade swtpmUpgrade qemu-kvm-commonUpgrade virt-dibUpgrade perl-Sys-VirtUpgrade python3-libvirtUpgrade libguestfs-benchmarkingUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-java-develUpgrade qemu-kvmUpgrade libiscsi-develUpgrade libvirt-develUpgrade swtpm-develUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storageUpgrade netcf-libsUpgrade libguestfs-xfsUpgrade libvirt-clientUpgrade nbdfuseUpgrade nbdkit-ssh-pluginUpgrade libiscsi-utilsUpgrade nbdkit-tmpdisk-pluginUpgrade supermin-develUpgrade seabios-binUpgrade qemu-kvm-block-curlUpgrade swtpm-toolsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-bash-completionUpgrade libguestfs-javaUpgrade libguestfs-gfs2Upgrade libguestfs-winsupportUpgrade python3-libnbdUpgrade virt-v2vUpgrade qemu-kvm-block-iscsiUpgrade seabiosUpgrade netcfUpgrade nbdkitUpgrade hivexUpgrade qemu-kvm-block-sshUpgrade nbdkit-gzip-filterUpgrade swtpm-libsUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfsUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-lockUpgrade superminUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-tar-filterUpgrade libguestfs-rsyncUpgrade python3-hivexUpgrade nbdkit-basic-filtersUpgrade python3-libguestfsUpgrade netcf-develUpgrade nbdkit-bash-completionUpgrade qemu-kvm-block-glusterUpgrade nbdkit-serverUpgrade nbdkit-linuxdisk-pluginUpgrade qemu-kvm-block-rbdUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-logUpgrade nbdkit-gzip-pluginUpgrade libiscsiUpgrade qemu-kvm-coreUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-coreUpgrade libtpms-develUpgrade libguestfs-man-pages-jaUpgrade libguestfs-develUpgrade libguestfs-bash-completionUpgrade ruby-hivexUpgrade qemu-imgUpgrade libvirt-daemon-proxyUpgrade qemu-virtiofsdUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-develUpgrade ruby-libguestfsUpgrade nbdkit-nbd-pluginUpgrade libguestfs-applianceUpgrade perl-Sys-GuestfsUpgrade perl-hivexUpgrade nbdkit-vddk-pluginUpgrade libvirt-daemon-plugin-lockdUpgrade libvirtUpgrade sgabiosUpgrade libguestfs-rescueUpgrade libguestfs-tools-cUpgrade libguestfs-gobjectUpgrade nbdkit-python-pluginUpgrade libvirt-daemon-driver-storage-glusterUpgrade lua-guestfsUpgrade virt-v2v-bash-completionUpgrade libguestfs-inspect-iconsUpgrade nbdkit-curl-plugin | Apr 11, 2024 | Mar 1, 2024 |
| Redhat_linux | — | Upgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-client-qemuUpgrade libvirt-docsUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-proxyUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirtUpgrade libvirt-wireshark-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-nss-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-develUpgrade libvirt-daemon-config-networkUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-nssUpgrade libvirt-debugsourceUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-lockNo solution existsUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-logical | May 1, 2024 | Mar 11, 2024 |
| Rocky_linux | — | Upgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirtUpgrade libvirt-libsUpgrade libvirt-daemon-kvmUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-client-qemuUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-logUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-lockUpgrade libvirt-docsUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-clientUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-commonUpgrade libvirt-libs-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfo | May 13, 2024 | Mar 11, 2024 |
| Suse | — | Upgrade libvirt-lock-sanlockUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-docUpgrade libvirtUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-hooksUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-adminUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-nssUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-commonUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-config-networkUpgrade wireshark-plugin-libvirtUpgrade libvirt-develUpgrade libvirt-client | Mar 28, 2024 | Mar 11, 2024 |
| Ubuntu | — | Upgrade libvirt-daemon-commonUpgrade libvirt0Upgrade libvirt-daemon-system-systemd (Ubuntu Pro)Upgrade libvirt-daemon-driver-storage-zfs (Ubuntu Pro)Upgrade libvirt-daemon-lockUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-zfsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-sanlock (Ubuntu Pro)Upgrade libvirt-daemon-driver-lxc (Ubuntu Pro)Upgrade libvirt-daemon-driver-vbox (Ubuntu Pro)Upgrade libvirt-daemon-driver-storage-diskUpgrade libnss-libvirtUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-rbd (Ubuntu Pro)Upgrade libvirt-daemon-system-sysvUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-clientsUpgrade libnss-libvirt (Ubuntu Pro)Upgrade libvirt-clients (Ubuntu Pro)Upgrade libvirt-daemon-system-sysv (Ubuntu Pro)Upgrade libvirt-sanlockUpgrade libvirt-wireshark (Ubuntu Pro)Upgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-gluster (Ubuntu Pro)Upgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-xen (Ubuntu Pro)Upgrade libvirt-login-shellUpgrade libvirt0 (Ubuntu Pro)Upgrade libvirt-dev (Ubuntu Pro)Upgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-wiresharkUpgrade libvirt-daemon-driver-vboxUpgrade libvirt-daemon-driver-qemu (Ubuntu Pro)Upgrade libvirt-devUpgrade libvirt-daemon-system (Ubuntu Pro)Upgrade libvirt-daemonUpgrade libvirt-daemon (Ubuntu Pro)Upgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-commonUpgrade libvirt-daemon-driver-xenUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-clients-qemuUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-bin (Ubuntu Pro)Upgrade libvirt-daemon-driver-storage-sheepdog (Ubuntu Pro)Upgrade libvirt-daemon-systemUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-system-systemdUpgrade libvirt-daemon-driver-network | Apr 16, 2024 | Mar 11, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub