A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libvirtalma-upgrade-libvirt-clientalma-upgrade-libvirt-client-qemualma-upgrade-libvirt-daemonalma-upgrade-libvirt-daemon-commonalma-upgrade-libvirt-daemon-config-networkalma-upgrade-libvirt-daemon-config-nwfilteralma-upgrade-libvirt-daemon-driver-interfacealma-upgrade-libvirt-daemon-driver-networkalma-upgrade-libvirt-daemon-driver-nodedevalma-upgrade-libvirt-daemon-driver-nwfilteralma-upgrade-libvirt-daemon-driver-qemualma-upgrade-libvirt-daemon-driver-secretalma-upgrade-libvirt-daemon-driver-storagealma-upgrade-libvirt-daemon-driver-storage-corealma-upgrade-libvirt-daemon-driver-storage-diskalma-upgrade-libvirt-daemon-driver-storage-iscsialma-upgrade-libvirt-daemon-driver-storage-logicalalma-upgrade-libvirt-daemon-driver-storage-mpathalma-upgrade-libvirt-daemon-driver-storage-rbdalma-upgrade-libvirt-daemon-driver-storage-scsialma-upgrade-libvirt-daemon-kvmalma-upgrade-libvirt-daemon-lockalma-upgrade-libvirt-daemon-logalma-upgrade-libvirt-daemon-plugin-lockdalma-upgrade-libvirt-daemon-plugin-sanlockalma-upgrade-libvirt-daemon-proxyalma-upgrade-libvirt-develalma-upgrade-libvirt-docsalma-upgrade-libvirt-libsalma-upgrade-libvirt-nssalma-upgrade-libvirt-ssh-proxy | Nov 19, 2024 | Aug 30, 2024 | |
| Alpine Linux | alpine-linux-upgrade-libvirt | Oct 1, 2024 | Aug 30, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-libvirtoracle-linux-upgrade-libvirt-clientoracle-linux-upgrade-libvirt-client-qemuoracle-linux-upgrade-libvirt-daemonoracle-linux-upgrade-libvirt-daemon-commonoracle-linux-upgrade-libvirt-daemon-config-networkoracle-linux-upgrade-libvirt-daemon-config-nwfilteroracle-linux-upgrade-libvirt-daemon-driver-interfaceoracle-linux-upgrade-libvirt-daemon-driver-networkoracle-linux-upgrade-libvirt-daemon-driver-nodedevoracle-linux-upgrade-libvirt-daemon-driver-nwfilteroracle-linux-upgrade-libvirt-daemon-driver-qemuoracle-linux-upgrade-libvirt-daemon-driver-secretoracle-linux-upgrade-libvirt-daemon-driver-storageoracle-linux-upgrade-libvirt-daemon-driver-storage-coreoracle-linux-upgrade-libvirt-daemon-driver-storage-diskoracle-linux-upgrade-libvirt-daemon-driver-storage-iscsioracle-linux-upgrade-libvirt-daemon-driver-storage-logicaloracle-linux-upgrade-libvirt-daemon-driver-storage-mpathoracle-linux-upgrade-libvirt-daemon-driver-storage-rbdoracle-linux-upgrade-libvirt-daemon-driver-storage-scsioracle-linux-upgrade-libvirt-daemon-kvmoracle-linux-upgrade-libvirt-daemon-lockoracle-linux-upgrade-libvirt-daemon-logoracle-linux-upgrade-libvirt-daemon-plugin-lockdoracle-linux-upgrade-libvirt-daemon-plugin-sanlockoracle-linux-upgrade-libvirt-daemon-proxyoracle-linux-upgrade-libvirt-develoracle-linux-upgrade-libvirt-docsoracle-linux-upgrade-libvirt-libsoracle-linux-upgrade-libvirt-nssoracle-linux-upgrade-libvirt-ssh-proxy | Nov 21, 2024 | Aug 29, 2024 |
| Redhat_linux | redhat-upgrade-libvirtredhat-upgrade-libvirt-clientredhat-upgrade-libvirt-client-debuginforedhat-upgrade-libvirt-client-qemuredhat-upgrade-libvirt-daemonredhat-upgrade-libvirt-daemon-commonredhat-upgrade-libvirt-daemon-common-debuginforedhat-upgrade-libvirt-daemon-config-networkredhat-upgrade-libvirt-daemon-config-nwfilterredhat-upgrade-libvirt-daemon-debuginforedhat-upgrade-libvirt-daemon-driver-interfaceredhat-upgrade-libvirt-daemon-driver-interface-debuginforedhat-upgrade-libvirt-daemon-driver-networkredhat-upgrade-libvirt-daemon-driver-network-debuginforedhat-upgrade-libvirt-daemon-driver-nodedevredhat-upgrade-libvirt-daemon-driver-nodedev-debuginforedhat-upgrade-libvirt-daemon-driver-nwfilterredhat-upgrade-libvirt-daemon-driver-nwfilter-debuginforedhat-upgrade-libvirt-daemon-driver-qemuredhat-upgrade-libvirt-daemon-driver-qemu-debuginforedhat-upgrade-libvirt-daemon-driver-secretredhat-upgrade-libvirt-daemon-driver-secret-debuginforedhat-upgrade-libvirt-daemon-driver-storageredhat-upgrade-libvirt-daemon-driver-storage-coreredhat-upgrade-libvirt-daemon-driver-storage-core-debuginforedhat-upgrade-libvirt-daemon-driver-storage-diskredhat-upgrade-libvirt-daemon-driver-storage-disk-debuginforedhat-upgrade-libvirt-daemon-driver-storage-iscsiredhat-upgrade-libvirt-daemon-driver-storage-iscsi-debuginforedhat-upgrade-libvirt-daemon-driver-storage-logicalredhat-upgrade-libvirt-daemon-driver-storage-logical-debuginforedhat-upgrade-libvirt-daemon-driver-storage-mpathredhat-upgrade-libvirt-daemon-driver-storage-mpath-debuginforedhat-upgrade-libvirt-daemon-driver-storage-rbdredhat-upgrade-libvirt-daemon-driver-storage-rbd-debuginforedhat-upgrade-libvirt-daemon-driver-storage-scsiredhat-upgrade-libvirt-daemon-driver-storage-scsi-debuginforedhat-upgrade-libvirt-daemon-kvmredhat-upgrade-libvirt-daemon-lockredhat-upgrade-libvirt-daemon-lock-debuginforedhat-upgrade-libvirt-daemon-logredhat-upgrade-libvirt-daemon-log-debuginforedhat-upgrade-libvirt-daemon-plugin-lockdredhat-upgrade-libvirt-daemon-plugin-lockd-debuginforedhat-upgrade-libvirt-daemon-plugin-sanlockredhat-upgrade-libvirt-daemon-plugin-sanlock-debuginforedhat-upgrade-libvirt-daemon-proxyredhat-upgrade-libvirt-daemon-proxy-debuginforedhat-upgrade-libvirt-debuginforedhat-upgrade-libvirt-debugsourceredhat-upgrade-libvirt-develredhat-upgrade-libvirt-docsredhat-upgrade-libvirt-libsredhat-upgrade-libvirt-libs-debuginforedhat-upgrade-libvirt-nssredhat-upgrade-libvirt-nss-debuginforedhat-upgrade-libvirt-ssh-proxyredhat-upgrade-libvirt-ssh-proxy-debuginforedhat-upgrade-libvirt-wireshark-debuginfo | Nov 13, 2024 | Aug 30, 2024 | |
| Rocky_linux | rocky-upgrade-libvirtrocky-upgrade-libvirt-clientrocky-upgrade-libvirt-client-debuginforocky-upgrade-libvirt-client-qemurocky-upgrade-libvirt-daemonrocky-upgrade-libvirt-daemon-commonrocky-upgrade-libvirt-daemon-common-debuginforocky-upgrade-libvirt-daemon-config-networkrocky-upgrade-libvirt-daemon-config-nwfilterrocky-upgrade-libvirt-daemon-debuginforocky-upgrade-libvirt-daemon-driver-interfacerocky-upgrade-libvirt-daemon-driver-interface-debuginforocky-upgrade-libvirt-daemon-driver-networkrocky-upgrade-libvirt-daemon-driver-network-debuginforocky-upgrade-libvirt-daemon-driver-nodedevrocky-upgrade-libvirt-daemon-driver-nodedev-debuginforocky-upgrade-libvirt-daemon-driver-nwfilterrocky-upgrade-libvirt-daemon-driver-nwfilter-debuginforocky-upgrade-libvirt-daemon-driver-qemurocky-upgrade-libvirt-daemon-driver-qemu-debuginforocky-upgrade-libvirt-daemon-driver-secretrocky-upgrade-libvirt-daemon-driver-secret-debuginforocky-upgrade-libvirt-daemon-driver-storagerocky-upgrade-libvirt-daemon-driver-storage-corerocky-upgrade-libvirt-daemon-driver-storage-core-debuginforocky-upgrade-libvirt-daemon-driver-storage-diskrocky-upgrade-libvirt-daemon-driver-storage-disk-debuginforocky-upgrade-libvirt-daemon-driver-storage-iscsirocky-upgrade-libvirt-daemon-driver-storage-iscsi-debuginforocky-upgrade-libvirt-daemon-driver-storage-logicalrocky-upgrade-libvirt-daemon-driver-storage-logical-debuginforocky-upgrade-libvirt-daemon-driver-storage-mpathrocky-upgrade-libvirt-daemon-driver-storage-mpath-debuginforocky-upgrade-libvirt-daemon-driver-storage-rbdrocky-upgrade-libvirt-daemon-driver-storage-rbd-debuginforocky-upgrade-libvirt-daemon-driver-storage-scsirocky-upgrade-libvirt-daemon-driver-storage-scsi-debuginforocky-upgrade-libvirt-daemon-kvmrocky-upgrade-libvirt-daemon-lockrocky-upgrade-libvirt-daemon-lock-debuginforocky-upgrade-libvirt-daemon-logrocky-upgrade-libvirt-daemon-log-debuginforocky-upgrade-libvirt-daemon-plugin-lockdrocky-upgrade-libvirt-daemon-plugin-lockd-debuginforocky-upgrade-libvirt-daemon-plugin-sanlockrocky-upgrade-libvirt-daemon-plugin-sanlock-debuginforocky-upgrade-libvirt-daemon-proxyrocky-upgrade-libvirt-daemon-proxy-debuginforocky-upgrade-libvirt-debuginforocky-upgrade-libvirt-debugsourcerocky-upgrade-libvirt-develrocky-upgrade-libvirt-docsrocky-upgrade-libvirt-libsrocky-upgrade-libvirt-libs-debuginforocky-upgrade-libvirt-nssrocky-upgrade-libvirt-nss-debuginforocky-upgrade-libvirt-ssh-proxyrocky-upgrade-libvirt-ssh-proxy-debuginfo | Mar 18, 2025 | Aug 30, 2024 | |
| Suse | — | suse-upgrade-libvirtsuse-upgrade-libvirt-clientsuse-upgrade-libvirt-client-qemususe-upgrade-libvirt-daemonsuse-upgrade-libvirt-daemon-commonsuse-upgrade-libvirt-daemon-config-networksuse-upgrade-libvirt-daemon-config-nwfiltersuse-upgrade-libvirt-daemon-driver-interfacesuse-upgrade-libvirt-daemon-driver-libxlsuse-upgrade-libvirt-daemon-driver-networksuse-upgrade-libvirt-daemon-driver-nodedevsuse-upgrade-libvirt-daemon-driver-nwfiltersuse-upgrade-libvirt-daemon-driver-qemususe-upgrade-libvirt-daemon-driver-secretsuse-upgrade-libvirt-daemon-driver-storagesuse-upgrade-libvirt-daemon-driver-storage-coresuse-upgrade-libvirt-daemon-driver-storage-disksuse-upgrade-libvirt-daemon-driver-storage-iscsisuse-upgrade-libvirt-daemon-driver-storage-iscsi-directsuse-upgrade-libvirt-daemon-driver-storage-logicalsuse-upgrade-libvirt-daemon-driver-storage-mpathsuse-upgrade-libvirt-daemon-driver-storage-rbdsuse-upgrade-libvirt-daemon-driver-storage-scsisuse-upgrade-libvirt-daemon-hookssuse-upgrade-libvirt-daemon-locksuse-upgrade-libvirt-daemon-logsuse-upgrade-libvirt-daemon-plugin-lockdsuse-upgrade-libvirt-daemon-plugin-sanlocksuse-upgrade-libvirt-daemon-proxysuse-upgrade-libvirt-daemon-qemususe-upgrade-libvirt-daemon-xensuse-upgrade-libvirt-develsuse-upgrade-libvirt-docsuse-upgrade-libvirt-libssuse-upgrade-libvirt-nsssuse-upgrade-libvirt-ssh-proxy | Dec 5, 2025 | Nov 21, 2024 |
| Ubuntu | ubuntu-upgrade-libvirt | Nov 19, 2024 | Aug 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub