CVE-2024-31420
Cnv: dos through repeatedly calling vm-dump-metrics until virt handler crashes
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Cnv: dos through repeatedly calling vm-dump-metrics until virt handler crashes
A NULL pointer dereference flaw was found in KubeVirt. This flaw allows an attacker who has access to a virtual machine guest on a node with DownwardMetrics enabled to cause a denial of service by issuing a high number of calls to vm-dump-metrics --virtio and then deleting the virtual machine.
Reserved 2024-04-03 | Published 2024-04-03 | Updated 2025-02-07 | Assigner redhat| 2024-04-03: | Reported to Red Hat. |
| 2024-04-03: | Made public. |
access.redhat.com/security/cve/CVE-2024-31420
bugzilla.redhat.com/show_bug.cgi?id=2272951 (RHBZ#2272951)
Support options
