Lucene search

K
cvelistRedhatCVELIST:CVE-2024-31420
HistoryApr 03, 2024 - 2:01 p.m.

CVE-2024-31420 Cnv: dos through repeatedly calling vm-dump-metrics until virt handler crashes

2024-04-0314:01:07
CWE-476
redhat
raw.githubusercontent.com
null pointer dereference
kubevirt
downwardmetrics
denial of service

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.4%

A NULL pointer dereference flaw was found in KubeVirt. This flaw allows an attacker who has access to a virtual machine guest on a node with DownwardMetrics enabled to cause a denial of service by issuing a high number of calls to vm-dump-metrics --virtio and then deleting the virtual machine.

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.4%

Related for CVELIST:CVE-2024-31420