Lucene search

Gentoo FoundationMGASA-2024-0163

HistoryMay 09, 2024 - 5:40 a.m.

Updated libvirt packages fix security vulnerability

2024-05-0905:40:29

Gentoo Foundation

advisories.mageia.org

libvirt

packages

security vulnerability

null pointer

denial of service

cve-2024-2496

udevconnectlistallinterfaces

host interface

virconnectlistallinterfaces api

crash

daemon

unix

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.1%

JSON

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces() function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of service attack by causing the libvirt daemon to crash. (CVE-2024-2496)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchlibvirt< 9.6.0-1.2libvirt-9.6.0-1.2.mga9

OS	Version	Architecture	Package	Version	Filename
Mageia	9	noarch	libvirt	< 9.6.0-1.2	libvirt-9.6.0-1.2.mga9

References

bugs.mageia.org/show_bug.cgi?id=33162

lwn.net/Articles/971691/