We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Fathom (Privacy friendly web analytics)
Zendesk (Helpdesk and Chat)

Ok

Home | EN
Support
CVE

PUBLISHED

CVE-2024-2496

Libvirt: null pointer dereference in udevconnectlistallinterfaces()

Assigner	redhat
Reserved	2024-03-15
Published	2024-03-18
Updated	2024-06-04

Description

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces() function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of service attack by causing the libvirt daemon to crash.

MEDIUM: 5.0

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Problem types

NULL Pointer Dereference

Product status

Default status

affected

0:10.0.0-6.el9_4 before *

unaffected

Default status

unknown

Default status

unknown

Default status

affected

Default status

affected

Timeline

2024-03-15:	Reported to Red Hat.
2024-02-26:	Made public.

References

https://access.redhat.com/errata/RHSA-2024:2236 (RHSA-2024:2236) vendor-advisory

https://access.redhat.com/security/cve/CVE-2024-2496 vdb-entry

https://bugzilla.redhat.com/show_bug.cgi?id=2269672 (RHBZ#2269672) issue-tracking

https://lists.debian.org/debian-lts-announce/2024/04/msg00000.html

cve.org CVE-2024-2496

nvd.nist.gov CVE-2024-2496

Download JSON

https://cve.threatint.com/CVE/CVE-2024-2496

Find us on

Data Privacy
Terms of Use

© Copyright 2024 THREATINT. Made in Cyprus with ❤ + ☼