Medium: libvirt

Issue Overview: An off-by-one error flaw was found in the udevListInterfacesByStatus function in libvirt when the number of interfaces exceeds the size of the names array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to...

Critical Photon OS Security Update - PHSA-2024-4.0-0592

Updates of 'libvirt', 'suricata', 'wireshark', 'linux-aws', 'openssl', 'linux', 'linux-secure', 'ruby', 'linux-rt' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2024-3.0-0749

Updates of 'linux', 'libvirt' packages of Photon OS have been released...

Ubuntu: Security Advisory (USN-6734-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6734-1 libvirt vulnerabilities

Alexander Kuznetsov discovered that libvirt incorrectly handled certain API calls. An attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service. CVE-2024-1441 It was discovered that libvirt incorrectly handled certain RPC library API calls. An attacker cou...

USN-6734-1: libvirt vulnerabilities

Alexander Kuznetsov discovered that libvirt incorrectly handled certain API calls. An attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service. CVE-2024-1441 It was discovered that libvirt incorrectly handled certain RPC library API calls. An attacker cou...

Important Photon OS Security Update - PHSA-2024-5.0-0246

Updates of 'suricata', 'libvirt' packages of Photon OS have been released...

ROS-20240415-02

Vulnerability of udevListInterfacesByStatus function in module src/interface/interfacebackendudev.c of libvirt library is caused by an off-by-one error. module of the libvirt library has an off-by-one error. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : libvirt vulnerabilities (USN-6734-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6734-1 advisory. Alexander Kuznetsov discovered that libvirt incorrectly handled certain API calls. An attacker could possibly use this issue to cause...

Moderate Photon OS Security Update - PHSA-2024-5.0-92-0246

Updates of 'libvirt' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-5.0-91-0246

Updates of 'suricata', 'libvirt' packages of Photon OS have been released...

OESA-2024-1391 libvirt security update

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: An off-by-one error flaw was found in the udevListInterfacesByStatus function in...

Libvirt Heap Buffer Overflow DoS

The vulnerability of the virStoragePoolObjListSearch function in the Libvirt management library arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Libvirt Heap Buffer Overflow DoS

The vulnerability of the virPCIVirtualFunctionList function in the virtualization management library Libvirt is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

libvirt Heap Buffer Overflow DoS

The vulnerability of the udevListInterfacesByStatus function in the src/interface/interfacebackendudev.c module of the libvirt library is related to an off-by-one error. Exploiting this vulnerability could allow an attacker to trigger a service failure...

virt:kvm_utils3 security update

hivex libguestfs libguestfs-winsupport 8.9-1 - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE-2022-40284 - resolves: rhbz2236372 libiscsi libnbd libtpms libvirt 9.0.0-5 - Fix off-by-one error in udevListInterfacesByStatus Martin Kletzander Orabug: 36364464 CVE-2024-1441 libvirt-dbus libvirt-python...

ROS-20240410-03

A vulnerability in the Libvirt virtualization management library is related to insufficient blocking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2024-1441 affecting package libvirt for versions less than 7.10.0-8

CVE-2024-1441 affecting package libvirt for versions less than 7.10.0-8. A patched version of the package is available...

SUSE SLES15: libvirt / libvirt-client / libvirt-daemon / etc (SUSE-SU-2024:1100-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1100-1 advisory. - CVE-2024-2494: Add a check for negative array lengths before allocation to prevent potential DoS. bsc1221815 Tenable has extracted the...

SUSE SLED15: libvirt / libvirt-client / libvirt-client-qemu / libvirt-daemon / etc (SUSE-SU-2024:1099-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1099-1 advisory. - CVE-2024-2494: Add a check for negative array lengths before allocation to prevent potential...