Lucene search
K

3821 matches found

Cvelist
Cvelist
added 2024/03/21 1:39 p.m.24 views

CVE-2024-2494 Libvirt: negative g_new0 length can lead to unbounded memory allocation

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the gnew0 function results in a crash due to the negative length being...

6.2CVSS6.6AI score0.00364EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2024/03/21 1:39 p.m.27 views

CVE-2024-2494

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the gnew0 function results in a crash due to the negative length being...

6.2CVSS6AI score0.00364EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2024/03/21 9:31 a.m.35 views

CVE-2024-2494

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the gnew0 function results in a crash due to the negative length being...

6.2CVSS7.2AI score0.00364EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/03/21 12:0 a.m.2 views

Red Hat libvirt 安全漏洞

Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. that supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A security vulnerability exists in Red Hat libvirt, which...

6.2CVSS6.4AI score0.00364EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2024/03/20 12:0 p.m.32 views

CVE-2024-2494

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the gnew0 function results in a crash due to the negative length being...

6.2CVSS6.7AI score0.00364EPSS
Exploits0References3
OSV
OSV
added 2024/03/20 12:0 p.m.1 views

UBUNTU-CVE-2024-2494

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the gnew0 function results in a crash due to the negative length being...

6.2CVSS6.7AI score0.00364EPSS
Exploits0References4
Fedora
Fedora
added 2024/03/20 2:4 a.m.30 views

[SECURITY] Fedora 39 Update: libvirt-9.7.0-3.fc39

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support...

5.5CVSS7.2AI score0.00398EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/03/20 12:0 a.m.33 views

Fedora 39 : libvirt (2024-d96cdeb8ec)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d96cdeb8ec advisory. Fix crash listing interfaces with missing link status attribute rhbz 2266014 Fix crash listing interfaces with missized array CVE-2024-1441 Tenable...

5.5CVSS6.6AI score0.00398EPSS
Exploits0References3
CBLMariner
CBLMariner
added 2024/03/19 5:21 p.m.24 views

CVE-2023-2700 affecting package libvirt for versions less than 7.10.0-5

CVE-2023-2700 affecting package libvirt for versions less than 7.10.0-5. A patched version of the package is available...

5.5CVSS6AI score0.00298EPSS
Exploits0
NVD
NVD
added 2024/03/18 1:15 p.m.11 views

CVE-2024-2496

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of...

5.5CVSS5.5AI score0.0025EPSS
Exploits0References4
OSV
OSV
added 2024/03/18 1:15 p.m.2 views

DEBIAN-CVE-2024-2496

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of...

5.5CVSS6.5AI score0.0025EPSS
Exploits0References1
OSV
OSV
added 2024/03/18 1:15 p.m.11 views

CVE-2024-2496

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of...

5.5CVSS4.9AI score0.0025EPSS
Exploits0References4
OSV
OSV
added 2024/03/18 1:15 p.m.4 views

AZL-36893 CVE-2024-2496 affecting package libvirt for versions less than 7.10.0-8

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of...

5.5CVSS6.9AI score0.0025EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/03/18 1:15 p.m.20 views

CVE-2024-2496

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of...

5.5CVSS6.3AI score0.0025EPSS
Exploits0References3
OSV
OSV
added 2024/03/18 1:15 p.m.0 views

UBUNTU-CVE-2024-2496

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of...

5.5CVSS7.2AI score0.0025EPSS
Exploits0References4
CVE
CVE
added 2024/03/18 12:54 p.m.220 views

CVE-2024-2496

Mode C: This CVE is active in libvirt. A NULL pointer dereference in udevConnectListAllInterfaces() can occur when detaching a host interface while listing interfaces with virConnectListAllInterfaces, potentially crashing the libvirt daemon (DoS). Connected advisories confirm affected packages an...

5.5CVSS5.4AI score0.0025EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2024/03/18 12:54 p.m.24 views

CVE-2024-2496 Libvirt: null pointer dereference in udevconnectlistallinterfaces()

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of...

5CVSS5.5AI score0.0025EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/03/18 12:54 p.m.16 views

CVE-2024-2496 Libvirt: null pointer dereference in udevconnectlistallinterfaces()

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of...

5CVSS6.5AI score0.0025EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2024/03/18 12:54 p.m.38 views

CVE-2024-2496

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of...

5.5CVSS5.4AI score0.0025EPSS
Exploits0
CNNVD
CNNVD
added 2024/03/18 12:0 a.m.3 views

Red Hat libvirt Code Issue Vulnerability

Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. that supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A code issue vulnerability exists in Red Hat libvirt that...

5.5CVSS6.8AI score0.0025EPSS
Exploits0References4
Rows per page
Query Builder