A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-interfaceUpgrade libvirtUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-nssUpgrade libvirt-daemon-proxyUpgrade libvirt-libsUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clientUpgrade libvirt-daemon-driver-networkUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-develUpgrade libvirt-daemon-logUpgrade libvirt-daemonUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-plugin-lockd | Nov 19, 2024 | Aug 30, 2024 |
| Alpine Linux | — | Upgrade libvirt | Oct 1, 2024 | Aug 30, 2024 |
| Debian | — | Upgrade libvirt | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemonUpgrade libvirt-libsUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-develUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-clientUpgrade libvirtUpgrade libvirt-docsUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-networkUpgrade libvirt-client-qemuUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-nss | Nov 21, 2024 | Aug 29, 2024 |
| Redhat_linux | — | Upgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-logUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-docsUpgrade libvirt-wireshark-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-client-qemuUpgrade libvirtUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-commonUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-secretUpgrade libvirt-ssh-proxy-debuginfoUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-libsUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libs-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-nssUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-storage-mpath-debuginfo | Nov 13, 2024 | Aug 30, 2024 |
| Rocky_linux | — | Upgrade libvirt-client-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirtUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-ssh-proxy-debuginfoUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-commonUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-nssUpgrade libvirt-libsUpgrade libvirt-docsUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-clientUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-networkUpgrade libvirt-client-qemuUpgrade libvirt-devel | Mar 18, 2025 | Aug 30, 2024 |
| Suse | — | Upgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-logUpgrade libvirtUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libsUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-docUpgrade libvirt-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-client-qemuUpgrade libvirt-daemon-hooksUpgrade libvirt-nssUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-config-nwfilter | Dec 5, 2025 | Nov 21, 2024 |
| Ubuntu | — | Upgrade libvirt | Nov 19, 2024 | Aug 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub