An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libvirtalma-upgrade-libvirt-clientalma-upgrade-libvirt-client-qemualma-upgrade-libvirt-daemonalma-upgrade-libvirt-daemon-commonalma-upgrade-libvirt-daemon-config-networkalma-upgrade-libvirt-daemon-config-nwfilteralma-upgrade-libvirt-daemon-driver-interfacealma-upgrade-libvirt-daemon-driver-networkalma-upgrade-libvirt-daemon-driver-nodedevalma-upgrade-libvirt-daemon-driver-nwfilteralma-upgrade-libvirt-daemon-driver-qemualma-upgrade-libvirt-daemon-driver-secretalma-upgrade-libvirt-daemon-driver-storagealma-upgrade-libvirt-daemon-driver-storage-corealma-upgrade-libvirt-daemon-driver-storage-diskalma-upgrade-libvirt-daemon-driver-storage-iscsialma-upgrade-libvirt-daemon-driver-storage-logicalalma-upgrade-libvirt-daemon-driver-storage-mpathalma-upgrade-libvirt-daemon-driver-storage-rbdalma-upgrade-libvirt-daemon-driver-storage-scsialma-upgrade-libvirt-daemon-kvmalma-upgrade-libvirt-daemon-lockalma-upgrade-libvirt-daemon-logalma-upgrade-libvirt-daemon-plugin-lockdalma-upgrade-libvirt-daemon-plugin-sanlockalma-upgrade-libvirt-daemon-proxyalma-upgrade-libvirt-develalma-upgrade-libvirt-docsalma-upgrade-libvirt-libsalma-upgrade-libvirt-nss | May 8, 2024 | Mar 11, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libvirtamazon-linux-ami-2-upgrade-libvirt-adminamazon-linux-ami-2-upgrade-libvirt-bash-completionamazon-linux-ami-2-upgrade-libvirt-clientamazon-linux-ami-2-upgrade-libvirt-daemonamazon-linux-ami-2-upgrade-libvirt-daemon-config-networkamazon-linux-ami-2-upgrade-libvirt-daemon-config-nwfilteramazon-linux-ami-2-upgrade-libvirt-daemon-driver-interfaceamazon-linux-ami-2-upgrade-libvirt-daemon-driver-lxcamazon-linux-ami-2-upgrade-libvirt-daemon-driver-networkamazon-linux-ami-2-upgrade-libvirt-daemon-driver-nodedevamazon-linux-ami-2-upgrade-libvirt-daemon-driver-nwfilteramazon-linux-ami-2-upgrade-libvirt-daemon-driver-qemuamazon-linux-ami-2-upgrade-libvirt-daemon-driver-secretamazon-linux-ami-2-upgrade-libvirt-daemon-driver-storageamazon-linux-ami-2-upgrade-libvirt-daemon-driver-storage-coreamazon-linux-ami-2-upgrade-libvirt-daemon-driver-storage-diskamazon-linux-ami-2-upgrade-libvirt-daemon-driver-storage-glusteramazon-linux-ami-2-upgrade-libvirt-daemon-driver-storage-iscsiamazon-linux-ami-2-upgrade-libvirt-daemon-driver-storage-logicalamazon-linux-ami-2-upgrade-libvirt-daemon-driver-storage-mpathamazon-linux-ami-2-upgrade-libvirt-daemon-driver-storage-rbdamazon-linux-ami-2-upgrade-libvirt-daemon-driver-storage-scsiamazon-linux-ami-2-upgrade-libvirt-daemon-kvmamazon-linux-ami-2-upgrade-libvirt-daemon-lxcamazon-linux-ami-2-upgrade-libvirt-debuginfoamazon-linux-ami-2-upgrade-libvirt-develamazon-linux-ami-2-upgrade-libvirt-docsamazon-linux-ami-2-upgrade-libvirt-libsamazon-linux-ami-2-upgrade-libvirt-lock-sanlockamazon-linux-ami-2-upgrade-libvirt-login-shellamazon-linux-ami-2-upgrade-libvirt-nss | Apr 19, 2024 | Mar 11, 2024 | |
| Debian | debian-upgrade-libvirt | Apr 3, 2024 | Mar 11, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-hivexoracle-linux-upgrade-hivex-develoracle-linux-upgrade-libguestfsoracle-linux-upgrade-libguestfs-applianceoracle-linux-upgrade-libguestfs-bash-completionoracle-linux-upgrade-libguestfs-benchmarkingoracle-linux-upgrade-libguestfs-develoracle-linux-upgrade-libguestfs-gfs2oracle-linux-upgrade-libguestfs-gobjectoracle-linux-upgrade-libguestfs-gobject-develoracle-linux-upgrade-libguestfs-inspect-iconsoracle-linux-upgrade-libguestfs-javaoracle-linux-upgrade-libguestfs-java-develoracle-linux-upgrade-libguestfs-javadocoracle-linux-upgrade-libguestfs-man-pages-jaoracle-linux-upgrade-libguestfs-man-pages-ukoracle-linux-upgrade-libguestfs-rescueoracle-linux-upgrade-libguestfs-rsyncoracle-linux-upgrade-libguestfs-toolsoracle-linux-upgrade-libguestfs-tools-coracle-linux-upgrade-libguestfs-winsupportoracle-linux-upgrade-libguestfs-xfsoracle-linux-upgrade-libiscsioracle-linux-upgrade-libiscsi-develoracle-linux-upgrade-libiscsi-utilsoracle-linux-upgrade-libnbdoracle-linux-upgrade-libnbd-bash-completionoracle-linux-upgrade-libnbd-develoracle-linux-upgrade-libtpmsoracle-linux-upgrade-libtpms-develoracle-linux-upgrade-libvirtoracle-linux-upgrade-libvirt-adminoracle-linux-upgrade-libvirt-bash-completionoracle-linux-upgrade-libvirt-clientoracle-linux-upgrade-libvirt-client-qemuoracle-linux-upgrade-libvirt-daemonoracle-linux-upgrade-libvirt-daemon-commonoracle-linux-upgrade-libvirt-daemon-config-networkoracle-linux-upgrade-libvirt-daemon-config-nwfilteroracle-linux-upgrade-libvirt-daemon-driver-interfaceoracle-linux-upgrade-libvirt-daemon-driver-networkoracle-linux-upgrade-libvirt-daemon-driver-nodedevoracle-linux-upgrade-libvirt-daemon-driver-nwfilteroracle-linux-upgrade-libvirt-daemon-driver-qemuoracle-linux-upgrade-libvirt-daemon-driver-secretoracle-linux-upgrade-libvirt-daemon-driver-storageoracle-linux-upgrade-libvirt-daemon-driver-storage-coreoracle-linux-upgrade-libvirt-daemon-driver-storage-diskoracle-linux-upgrade-libvirt-daemon-driver-storage-glusteroracle-linux-upgrade-libvirt-daemon-driver-storage-iscsioracle-linux-upgrade-libvirt-daemon-driver-storage-iscsi-directoracle-linux-upgrade-libvirt-daemon-driver-storage-logicaloracle-linux-upgrade-libvirt-daemon-driver-storage-mpathoracle-linux-upgrade-libvirt-daemon-driver-storage-rbdoracle-linux-upgrade-libvirt-daemon-driver-storage-scsioracle-linux-upgrade-libvirt-daemon-kvmoracle-linux-upgrade-libvirt-daemon-lockoracle-linux-upgrade-libvirt-daemon-logoracle-linux-upgrade-libvirt-daemon-plugin-lockdoracle-linux-upgrade-libvirt-daemon-plugin-sanlockoracle-linux-upgrade-libvirt-daemon-proxyoracle-linux-upgrade-libvirt-dbusoracle-linux-upgrade-libvirt-develoracle-linux-upgrade-libvirt-docsoracle-linux-upgrade-libvirt-libsoracle-linux-upgrade-libvirt-lock-sanlockoracle-linux-upgrade-libvirt-nssoracle-linux-upgrade-libvirt-wiresharkoracle-linux-upgrade-lua-guestfsoracle-linux-upgrade-nbdfuseoracle-linux-upgrade-nbdkitoracle-linux-upgrade-nbdkit-bash-completionoracle-linux-upgrade-nbdkit-basic-filtersoracle-linux-upgrade-nbdkit-basic-pluginsoracle-linux-upgrade-nbdkit-curl-pluginoracle-linux-upgrade-nbdkit-develoracle-linux-upgrade-nbdkit-example-pluginsoracle-linux-upgrade-nbdkit-gzip-filteroracle-linux-upgrade-nbdkit-gzip-pluginoracle-linux-upgrade-nbdkit-linuxdisk-pluginoracle-linux-upgrade-nbdkit-nbd-pluginoracle-linux-upgrade-nbdkit-python-pluginoracle-linux-upgrade-nbdkit-serveroracle-linux-upgrade-nbdkit-ssh-pluginoracle-linux-upgrade-nbdkit-tar-filteroracle-linux-upgrade-nbdkit-tar-pluginoracle-linux-upgrade-nbdkit-tmpdisk-pluginoracle-linux-upgrade-nbdkit-vddk-pluginoracle-linux-upgrade-nbdkit-xz-filteroracle-linux-upgrade-netcforacle-linux-upgrade-netcf-develoracle-linux-upgrade-netcf-libsoracle-linux-upgrade-perl-hivexoracle-linux-upgrade-perl-sys-guestfsoracle-linux-upgrade-perl-sys-virtoracle-linux-upgrade-python3-hivexoracle-linux-upgrade-python3-libguestfsoracle-linux-upgrade-python3-libnbdoracle-linux-upgrade-python3-libvirtoracle-linux-upgrade-qemu-guest-agentoracle-linux-upgrade-qemu-imgoracle-linux-upgrade-qemu-kvmoracle-linux-upgrade-qemu-kvm-block-curloracle-linux-upgrade-qemu-kvm-block-glusteroracle-linux-upgrade-qemu-kvm-block-iscsioracle-linux-upgrade-qemu-kvm-block-rbdoracle-linux-upgrade-qemu-kvm-block-sshoracle-linux-upgrade-qemu-kvm-commonoracle-linux-upgrade-qemu-kvm-coreoracle-linux-upgrade-qemu-virtiofsdoracle-linux-upgrade-ruby-hivexoracle-linux-upgrade-ruby-libguestfsoracle-linux-upgrade-seabiosoracle-linux-upgrade-seabios-binoracle-linux-upgrade-seavgabios-binoracle-linux-upgrade-sgabiosoracle-linux-upgrade-sgabios-binoracle-linux-upgrade-superminoracle-linux-upgrade-supermin-develoracle-linux-upgrade-swtpmoracle-linux-upgrade-swtpm-develoracle-linux-upgrade-swtpm-libsoracle-linux-upgrade-swtpm-toolsoracle-linux-upgrade-swtpm-tools-pkcs11oracle-linux-upgrade-virt-diboracle-linux-upgrade-virt-v2voracle-linux-upgrade-virt-v2v-bash-completionoracle-linux-upgrade-virt-v2v-man-pages-jaoracle-linux-upgrade-virt-v2v-man-pages-uk | Apr 11, 2024 | Mar 1, 2024 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-libvirtredhat-upgrade-libvirt-clientredhat-upgrade-libvirt-client-debuginforedhat-upgrade-libvirt-client-qemuredhat-upgrade-libvirt-daemonredhat-upgrade-libvirt-daemon-commonredhat-upgrade-libvirt-daemon-common-debuginforedhat-upgrade-libvirt-daemon-config-networkredhat-upgrade-libvirt-daemon-config-nwfilterredhat-upgrade-libvirt-daemon-debuginforedhat-upgrade-libvirt-daemon-driver-interfaceredhat-upgrade-libvirt-daemon-driver-interface-debuginforedhat-upgrade-libvirt-daemon-driver-networkredhat-upgrade-libvirt-daemon-driver-network-debuginforedhat-upgrade-libvirt-daemon-driver-nodedevredhat-upgrade-libvirt-daemon-driver-nodedev-debuginforedhat-upgrade-libvirt-daemon-driver-nwfilterredhat-upgrade-libvirt-daemon-driver-nwfilter-debuginforedhat-upgrade-libvirt-daemon-driver-qemuredhat-upgrade-libvirt-daemon-driver-qemu-debuginforedhat-upgrade-libvirt-daemon-driver-secretredhat-upgrade-libvirt-daemon-driver-secret-debuginforedhat-upgrade-libvirt-daemon-driver-storageredhat-upgrade-libvirt-daemon-driver-storage-coreredhat-upgrade-libvirt-daemon-driver-storage-core-debuginforedhat-upgrade-libvirt-daemon-driver-storage-diskredhat-upgrade-libvirt-daemon-driver-storage-disk-debuginforedhat-upgrade-libvirt-daemon-driver-storage-iscsiredhat-upgrade-libvirt-daemon-driver-storage-iscsi-debuginforedhat-upgrade-libvirt-daemon-driver-storage-logicalredhat-upgrade-libvirt-daemon-driver-storage-logical-debuginforedhat-upgrade-libvirt-daemon-driver-storage-mpathredhat-upgrade-libvirt-daemon-driver-storage-mpath-debuginforedhat-upgrade-libvirt-daemon-driver-storage-rbdredhat-upgrade-libvirt-daemon-driver-storage-rbd-debuginforedhat-upgrade-libvirt-daemon-driver-storage-scsiredhat-upgrade-libvirt-daemon-driver-storage-scsi-debuginforedhat-upgrade-libvirt-daemon-kvmredhat-upgrade-libvirt-daemon-lockredhat-upgrade-libvirt-daemon-lock-debuginforedhat-upgrade-libvirt-daemon-logredhat-upgrade-libvirt-daemon-log-debuginforedhat-upgrade-libvirt-daemon-plugin-lockdredhat-upgrade-libvirt-daemon-plugin-lockd-debuginforedhat-upgrade-libvirt-daemon-plugin-sanlockredhat-upgrade-libvirt-daemon-plugin-sanlock-debuginforedhat-upgrade-libvirt-daemon-proxyredhat-upgrade-libvirt-daemon-proxy-debuginforedhat-upgrade-libvirt-debuginforedhat-upgrade-libvirt-debugsourceredhat-upgrade-libvirt-develredhat-upgrade-libvirt-docsredhat-upgrade-libvirt-libsredhat-upgrade-libvirt-libs-debuginforedhat-upgrade-libvirt-nssredhat-upgrade-libvirt-nss-debuginforedhat-upgrade-libvirt-wireshark-debuginfo | May 1, 2024 | Mar 11, 2024 | |
| Rocky_linux | rocky-upgrade-libvirtrocky-upgrade-libvirt-clientrocky-upgrade-libvirt-client-debuginforocky-upgrade-libvirt-client-qemurocky-upgrade-libvirt-daemonrocky-upgrade-libvirt-daemon-commonrocky-upgrade-libvirt-daemon-common-debuginforocky-upgrade-libvirt-daemon-config-networkrocky-upgrade-libvirt-daemon-config-nwfilterrocky-upgrade-libvirt-daemon-debuginforocky-upgrade-libvirt-daemon-driver-interfacerocky-upgrade-libvirt-daemon-driver-interface-debuginforocky-upgrade-libvirt-daemon-driver-networkrocky-upgrade-libvirt-daemon-driver-network-debuginforocky-upgrade-libvirt-daemon-driver-nodedevrocky-upgrade-libvirt-daemon-driver-nodedev-debuginforocky-upgrade-libvirt-daemon-driver-nwfilterrocky-upgrade-libvirt-daemon-driver-nwfilter-debuginforocky-upgrade-libvirt-daemon-driver-qemurocky-upgrade-libvirt-daemon-driver-qemu-debuginforocky-upgrade-libvirt-daemon-driver-secretrocky-upgrade-libvirt-daemon-driver-secret-debuginforocky-upgrade-libvirt-daemon-driver-storagerocky-upgrade-libvirt-daemon-driver-storage-corerocky-upgrade-libvirt-daemon-driver-storage-core-debuginforocky-upgrade-libvirt-daemon-driver-storage-diskrocky-upgrade-libvirt-daemon-driver-storage-disk-debuginforocky-upgrade-libvirt-daemon-driver-storage-iscsirocky-upgrade-libvirt-daemon-driver-storage-iscsi-debuginforocky-upgrade-libvirt-daemon-driver-storage-logicalrocky-upgrade-libvirt-daemon-driver-storage-logical-debuginforocky-upgrade-libvirt-daemon-driver-storage-mpathrocky-upgrade-libvirt-daemon-driver-storage-mpath-debuginforocky-upgrade-libvirt-daemon-driver-storage-rbdrocky-upgrade-libvirt-daemon-driver-storage-rbd-debuginforocky-upgrade-libvirt-daemon-driver-storage-scsirocky-upgrade-libvirt-daemon-driver-storage-scsi-debuginforocky-upgrade-libvirt-daemon-kvmrocky-upgrade-libvirt-daemon-lockrocky-upgrade-libvirt-daemon-lock-debuginforocky-upgrade-libvirt-daemon-logrocky-upgrade-libvirt-daemon-log-debuginforocky-upgrade-libvirt-daemon-plugin-lockdrocky-upgrade-libvirt-daemon-plugin-lockd-debuginforocky-upgrade-libvirt-daemon-plugin-sanlockrocky-upgrade-libvirt-daemon-plugin-sanlock-debuginforocky-upgrade-libvirt-daemon-proxyrocky-upgrade-libvirt-daemon-proxy-debuginforocky-upgrade-libvirt-debuginforocky-upgrade-libvirt-debugsourcerocky-upgrade-libvirt-develrocky-upgrade-libvirt-docsrocky-upgrade-libvirt-libsrocky-upgrade-libvirt-libs-debuginforocky-upgrade-libvirt-nssrocky-upgrade-libvirt-nss-debuginfo | May 13, 2024 | Mar 11, 2024 | |
| Suse | — | suse-upgrade-libvirtsuse-upgrade-libvirt-adminsuse-upgrade-libvirt-clientsuse-upgrade-libvirt-client-qemususe-upgrade-libvirt-daemonsuse-upgrade-libvirt-daemon-commonsuse-upgrade-libvirt-daemon-config-networksuse-upgrade-libvirt-daemon-config-nwfiltersuse-upgrade-libvirt-daemon-driver-interfacesuse-upgrade-libvirt-daemon-driver-libxlsuse-upgrade-libvirt-daemon-driver-lxcsuse-upgrade-libvirt-daemon-driver-networksuse-upgrade-libvirt-daemon-driver-nodedevsuse-upgrade-libvirt-daemon-driver-nwfiltersuse-upgrade-libvirt-daemon-driver-qemususe-upgrade-libvirt-daemon-driver-secretsuse-upgrade-libvirt-daemon-driver-storagesuse-upgrade-libvirt-daemon-driver-storage-coresuse-upgrade-libvirt-daemon-driver-storage-disksuse-upgrade-libvirt-daemon-driver-storage-glustersuse-upgrade-libvirt-daemon-driver-storage-iscsisuse-upgrade-libvirt-daemon-driver-storage-iscsi-directsuse-upgrade-libvirt-daemon-driver-storage-logicalsuse-upgrade-libvirt-daemon-driver-storage-mpathsuse-upgrade-libvirt-daemon-driver-storage-rbdsuse-upgrade-libvirt-daemon-driver-storage-scsisuse-upgrade-libvirt-daemon-hookssuse-upgrade-libvirt-daemon-locksuse-upgrade-libvirt-daemon-logsuse-upgrade-libvirt-daemon-lxcsuse-upgrade-libvirt-daemon-plugin-lockdsuse-upgrade-libvirt-daemon-plugin-sanlocksuse-upgrade-libvirt-daemon-proxysuse-upgrade-libvirt-daemon-qemususe-upgrade-libvirt-daemon-xensuse-upgrade-libvirt-develsuse-upgrade-libvirt-devel-32bitsuse-upgrade-libvirt-docsuse-upgrade-libvirt-libssuse-upgrade-libvirt-lock-sanlocksuse-upgrade-libvirt-nsssuse-upgrade-libvirt-ssh-proxysuse-upgrade-wireshark-plugin-libvirt | Mar 28, 2024 | Mar 11, 2024 |
| Ubuntu | ubuntu-upgrade-libvirt-daemonubuntu-upgrade-libvirt-daemon-systemubuntu-upgrade-libvirt0 | Apr 16, 2024 | Mar 11, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub