NULL Pointer Dereference

Libvirt is vulnerable to NULL pointer dereference. The vulnerability is caused by a race condition due to the simultaneous detachment of a host interface while collecting the list of interfaces using the virConnectListAllInterfaces API. This race condition leads to a situation where the path...

SUSE-SU-2024:1083-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2024-2494: Fixed negative gnew0 length leading to unbounded memory allocation bsc1221815...

Denial Of Service (DoS)

Libvirt is vulnerable to Denial of ServiceDoS. The vulnerability is due to improper handling of negative array lengths during memory allocation. If an attacker can pass a negative length to the gnew0 function will usually result in a Denial of ServiceDoS...

SUSE SLES15 Security Update : libvirt (SUSE-SU-2024:1078-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1078-1 advisory. - CVE-2024-2494: Fixed negative gnew0 length can lead to unbounded memory allocation bsc1221815. Tenable has extracted the preceding...

Debian: Security Advisory (DLA-3778-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3778-1] libvirt security update

Debian LTS Advisory DLA-3778-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin April 01, 2024 https://wiki.debian.org/LTS Package : libvirt Version : 5.0.0-4+deb10u2 CVE ID : CVE-2020-10703 CVE-2020-12430 CVE-2020-25637 CVE-2021-3631 CVE-2021-3667 CVE-2021-3975...

SUSE-SU-2024:1078-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2024-2494: Fixed negative gnew0 length can lead to unbounded memory allocation bsc1221815...

Libvirt: negative g_new0 length can lead to unbounded memory allocation

...

Debian dla-3778 : libnss-libvirt - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3778 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3778-1 [email protected]...

DLA-3778-1 libvirt - security update

Bulletin has no description...

The vulnerability of the Libvirt virtualization management library, related to the incorrect assignment of permissions to critical resources, allows a hacker to gain access to confidential information.

The vulnerability of the Libvirt virtualization management library is related to the creation of SELinux MCS category pairs for dynamic virtual machine tags. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

[SECURITY] Fedora 40 Update: libvirt-sandbox-0.8.0-15.fc40

This package provides a command for running applications within a sandbox using libvirt...

ROS-20240329-20

Vulnerability in the virNWFilterObjListNumOfNWFilters method of the Libvirt virtualization management library is due to with insufficient blocking. Exploitation of the vulnerability allows an attacker acting remotely, cause a denial of service Vulnerability in virStoragePoolLookupByTargetPath API...

The vulnerability of the g_new0() function in the virtualization management library Libvirt, which allows a hacker to trigger a service failure

The vulnerability of the gnew0 function in the Libvirt virtualization management library is related to an improper check of the negative length of an array before memory allocation. Exploiting this vulnerability could allow a attacker to cause a service failure...

[SECURITY] Fedora 38 Update: libvirt-9.0.0-5.fc38

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support...

SUSE SLES12: libvirt / libvirt-admin / libvirt-client / libvirt-daemon / etc (SUSE-SU-2024:1005-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1005-1 advisory. - CVE-2024-2496: Fixed NULL pointer dereference in udevConnectListAllInterfaces bsc1221468. - CVE-2024-1441: Fix off-by-one error i...

Fedora: Security Advisory for libvirt (FEDORA-2024-1a59230214)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:1005-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2024-2496: Fixed NULL pointer dereference in udevConnectListAllInterfaces bsc1221468. - CVE-2024-1441: Fix off-by-one error in udevListInterfacesByStatus bsc1221237...

Fedora 38 : libvirt (2024-1a59230214)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-1a59230214 advisory. Fix crash listing interfaces with missing link status attribute rhbz 2266014 Fix crash listing interfaces with missized array CVE-2024-1441 Tenable...

Fedora: Security Advisory (FEDORA-2024-d96cdeb8ec)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...