We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)
Bugpilot (Bug tracking)

Ok

THREATINT CVE Home CVE Diag Help
PUBLISHED

CVE-2024-2496

Libvirt: null pointer dereference in udevconnectlistallinterfaces()

Reserved:2024-03-15
Published:2024-03-18
Updated:2024-04-03

Description

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces() function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of service attack by causing the libvirt daemon to crash.



MEDIUM: 5.0CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Problem types

NULL Pointer Dereference

Product status

9.8.0
unaffected

Default status
unknown

Default status
unknown

Default status
affected

Default status
affected

Default status
affected

Default status
affected

Timeline

2024-03-15:Reported to Red Hat.
2024-02-26:Made public.

References

https://access.redhat.com/security/cve/CVE-2024-2496 vdb-entry

https://bugzilla.redhat.com/show_bug.cgi?id=2269672 (RHBZ#2269672) issue-tracking

https://lists.debian.org/debian-lts-announce/2024/04/msg00000.html

cve.org CVE-2024-2496

nvd.nist.gov CVE-2024-2496

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-2496