A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-lockUpgrade libvirt-libsUpgrade libvirt-daemon-proxyUpgrade libvirt-ssh-proxyUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-secretUpgrade libvirtUpgrade libvirt-docsUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clientUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-client-qemuUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-logUpgrade libvirt-daemonUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-plugin-lockd | Nov 19, 2024 | Aug 30, 2024 |
| Alpine Linux | — | Upgrade libvirt | Oct 1, 2024 | Aug 30, 2024 |
| Debian | — | Upgrade libvirt | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade libvirt-develUpgrade libvirt-daemon-lockUpgrade libvirt-libsUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemonUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-docsUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secretUpgrade libvirtUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-proxyUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-iscsi | Nov 21, 2024 | Aug 29, 2024 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemonUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-libsUpgrade libvirt-daemon-config-nwfilterUpgrade libvirtUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-commonUpgrade libvirt-ssh-proxy-debuginfoUpgrade libvirt-wireshark-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-develUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfo | Nov 13, 2024 | Aug 30, 2024 |
| Rocky_linux | — | Upgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-lockUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-ssh-proxy-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-client-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-commonUpgrade libvirt-nssUpgrade libvirt-libsUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirt-clientUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemonUpgrade libvirt-daemon-logUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-develUpgrade libvirt-daemon-kvmUpgrade libvirt-docsUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-mpath | Mar 18, 2025 | Aug 30, 2024 |
| Suse | — | Upgrade libvirt-daemonUpgrade libvirt-daemon-config-networkUpgrade libvirt-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-client-qemuUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-xenUpgrade libvirt-ssh-proxyUpgrade libvirt-nssUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-commonUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-docUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade libvirt-daemon-logUpgrade libvirt-libsUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-qemu | Dec 5, 2025 | Nov 21, 2024 |
| Ubuntu | — | Upgrade libvirt | Nov 19, 2024 | Aug 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub