Lucene search

K
redhatRedHatRHSA-2024:2560
HistoryApr 30, 2024 - 11:38 a.m.

(RHSA-2024:2560) Moderate: libvirt security and bug fix update

2024-04-3011:38:52
access.redhat.com
9
libvirt
security
bug fix
c api
virtualization
linux
remote management
off-by-one error
memory allocation
cve-2024-1441
cve-2024-2494
rhel-9
jira:rhel-25081
jira:rhel-29515

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.6%

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fixes:

  • libvirt: off-by-one error in udevListInterfacesByStatus() (CVE-2024-1441)

  • libvirt: negative g_new0 length can lead to unbounded memory allocation (CVE-2024-2494)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fixes:

  • libvirt: off-by-one error in udevListInterfacesByStatus() [rhel-9] (JIRA:RHEL-25081)

  • libvirt: negative g_new0 length can lead to unbounded memory allocation [rhel-9] (JIRA:RHEL-29515)