CVE-2024-31420 vulnerabilities

Vulnerabilities for packages: virt-operator, virt-controller-fips, virt-launcher, harvester, harvester-fips, virt-operator-fips...

CVE-2024-31420

creationtimestamp| type| source ---|---|--- 2025-08-04 10:48:50+00:00| seen| Telegram/VSP2CdqGbC2i1LW8B-P382MDnqSZEpUOqtQxJVvEkb2xQ...

CVE-2024-31420

A NULL pointer dereference flaw was found in KubeVirt. This flaw allows an attacker who has access to a virtual machine guest on a node with DownwardMetrics enabled to cause a denial of service by issuing a high number of calls to vm-dump-metrics --virtio and then deleting the virtual machine...

CVE-2024-31420 Cnv: dos through repeatedly calling vm-dump-metrics until virt handler crashes

A NULL pointer dereference flaw was found in KubeVirt. This flaw allows an attacker who has access to a virtual machine guest on a node with DownwardMetrics enabled to cause a denial of service by issuing a high number of calls to vm-dump-metrics --virtio and then deleting the virtual machine...