A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvirt-daemonUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-logUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-nssUpgrade libvirt-client-qemuUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-clientUpgrade libvirt-docsUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-libsUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-secretUpgrade libvirtUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-kvm | Nov 19, 2024 | Aug 30, 2024 |
| Alpine Linux | — | Upgrade libvirt | Oct 1, 2024 | Aug 30, 2024 |
| Debian | — | Upgrade libvirt | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade libvirt-develUpgrade libvirt-daemon-logUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-lockUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemonUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-clientUpgrade libvirt-docsUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-qemuUpgrade libvirtUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-ssh-proxyUpgrade libvirt-client-qemu | Nov 21, 2024 | Aug 29, 2024 |
| Redhat_linux | — | Upgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemonUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-config-networkUpgrade libvirtUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-develUpgrade libvirt-wireshark-debuginfoUpgrade libvirt-ssh-proxyUpgrade libvirt-docsUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-debuginfoUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-ssh-proxy-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-logUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-logical | Nov 13, 2024 | Aug 30, 2024 |
| Rocky_linux | — | Upgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirtUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-proxyUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-ssh-proxy-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-nssUpgrade libvirt-libsUpgrade libvirt-docsUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-logUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-clientUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-networkUpgrade libvirt-client-qemuUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-qemu | Mar 18, 2025 | Aug 30, 2024 |
| Suse | — | Upgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-logUpgrade libvirt-daemon-qemuUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirtUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-docUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemonUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirt-client-qemuUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-xenUpgrade libvirt-nssUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-clientUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storageUpgrade libvirt-develUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-rbd | Dec 5, 2025 | Nov 21, 2024 |
| Ubuntu | — | Upgrade libvirt | Nov 19, 2024 | Aug 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub