Lucene search

K
redosRedosROS-20240423-02
HistoryApr 23, 2024 - 12:00 a.m.

ROS-20240423-02

2024-04-2300:00:00
redos.red-soft.ru
5
libvirt
g_new0 function
udevconnectlistallinterfaces
vulnerability
memory allocation
denial of service
remote exploitation
null pointer dereferencing
interface list
libvirt daemon crash

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

14.2%

Vulnerability of g_new0() function of Libvirt virtualization management library is related to incorrect checking of negative array length before memory allocation.
checking for negative array length before allocating memory. Exploitation of the vulnerability could allow
an attacker to cause a denial of service

Vulnerability in Libvirt virtualization management library is related to null pointer dereferencing of the
of the udevConnectListAllInterfaces() function. Exploitation of the vulnerability could allow an attacker acting
remotely, while disconnecting a host interface, to simultaneously collect a list of interfaces via the
virConnectListAllInterfaces API, which would crash the Libvirt daemon

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64libvirt<= 7.6.0-6UNKNOWN

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

14.2%