NULL Pointer Dereference

🗓️ 02 Sep 2024 11:51:38Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 7 Views

libvirt has a NULL Pointer Dereference vulnerability causing crashes in the virtinterfaced daemon.

Reporter	Title	Published	Views	Family All 39
AlpineLinux	CVE-2024-8235	30 Aug 202416:16	–	alpinelinux
AlmaLinux	Moderate: libvirt security update	12 Nov 202400:00	–	almalinux
AstraLinux	Astra Linux - уязвимость в libvirt	3 May 202623:59	–	astralinux
Circl	CVE-2024-8235	30 Aug 202419:49	–	circl
CNNVD	libvirt 代码问题漏洞	29 Aug 202400:00	–	cnnvd
CVE	CVE-2024-8235	30 Aug 202416:16	–	cve
Cvelist	CVE-2024-8235 Libvirt: crash of virtinterfaced via virconnectlistinterfaces()	30 Aug 202416:16	–	cvelist
Debian CVE	CVE-2024-8235	30 Aug 202416:16	–	debiancve
Oracle linux	libvirt security update	14 Nov 202400:00	–	oraclelinux
EUVD	EUVD-2024-49040	3 Oct 202520:07	–	euvd

Vulners

Node

libvirt libvirtMatch8.2.0-r1cpp

AND

libvirt libvirtMatch8.1.0-r1cpp

AND

libvirt libvirtMatch10.1.0-r1cpp

AND

libvirt libvirtMatch9.3.0-r2cpp

AND

libvirt libvirtMatch7.8.0-r0cpp

AND

libvirt libvirtMatch10.3.0-r0cpp

AND

libvirt libvirtMatch7.7.0-r0cpp

AND

libvirt libvirtMatch8.3.0-r0cpp

AND

libvirt libvirtMatch6.2.0-r0cpp

AND

libvirt libvirtMatch7.0.0-r0cpp

AND

libvirt libvirtMatch10.5.0-r0cpp

AND

libvirt libvirtMatch9.5.0-r1cpp

AND

libvirt libvirtMatch8.6.0-r0cpp

AND

libvirt libvirtMatch9.2.0-r2cpp

AND

libvirt libvirtMatch8.1.0-r0cpp

AND

libvirt libvirtMatch7.9.0-r0cpp

AND

libvirt libvirtMatch9.0.0-r0cpp

AND

libvirt libvirtMatch6.1.0-r0cpp

AND

libvirt libvirtMatch9.7.0-r0cpp

AND

libvirt libvirtMatch7.5.0-r0cpp

AND

libvirt libvirtMatch9.4.0-r0cpp

AND

libvirt libvirtMatch8.8.0-r0cpp

AND

libvirt libvirtMatch9.1.0-r1cpp

AND

libvirt libvirtMatch10.1.0-r0cpp

AND

libvirt libvirtMatch8.2.0-r0cpp

AND

libvirt libvirtMatch7.2.0-r0cpp

AND

libvirt libvirtMatch10.4.0-r0cpp

AND

libvirt libvirtMatch9.2.0-r3cpp

AND

libvirt libvirtMatch7.6.0-r0cpp

AND

libvirt libvirtMatch9.6.0-r0cpp

AND

libvirt libvirtMatch8.9.0-r4cpp

AND

libvirt libvirtMatch7.10.0-r3cpp

AND

libvirt libvirtMatch9.5.0-r0cpp

AND

libvirt libvirtMatch10.0.0-r0cpp

AND

libvirt libvirtMatch7.2.0-r1cpp

AND

libvirt libvirtMatch8.0.0-r1cpp

AND

libvirt libvirtMatch9.3.0-r1cpp

AND

libvirt libvirtMatch8.7.0-r1cpp

AND

libvirt libvirtMatch9.2.0-r0cpp

AND

libvirt libvirtMatch6.2.0-r1cpp

AND

libvirt libvirtMatch8.5.0-r1cpp

AND

libvirt libvirtMatch8.4.0-r0cpp

AND

libvirt libvirtMatch10.2.0-r0cpp

AND

libvirt libvirtMatch9.8.0-r0cpp

AND

libvirt libvirtMatch7.7.0-r2cpp

AND

libvirt libvirtMatch9.3.0-r0cpp

AND

libvirt libvirtMatch9.10.0-r0cpp

AND

libvirt libvirtMatch7.4.0-r0cpp

AND

libvirt libvirtMatch7.7.0-r1cpp

AND

libvirt libvirtMatch8.10.0-r0cpp

AND

libvirt libvirtMatch7.10.0-r2cpp

AND

libvirt libvirtMatch7.10.0-r1cpp

AND

libvirt libvirtMatch6.3.0-r0cpp

AND

libvirt libvirtMatch9.9.0-r0cpp

AND

alpinelinux alpine_linuxMatchedge

libvirt libvirtMatch10.3.0-r0cpp

AND

libvirt libvirtMatch10.2.0-r0cpp

AND

alpinelinux alpine_linuxMatch3.20

libvirt.so libvirt.soRange0.10004.0–0.10005.0cpp

Source	Link
access	www.access.redhat.com/security/cve/CVE-2024-8235
lists	www.lists.libvirt.org/archives/list/[email protected]/thread/X6WOVCL6QF3FQRFIIXL736RFZVSUWLWJ
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/advisories/GHSA-94ch-6cfh-xxgc
lists	www.lists.libvirt.org/archives/list/[email protected]/thread/X6WOVCL6QF3FQRFIIXL736RFZVSUWLWJ/
security	www.security.netapp.com/advisory/ntap-20240920-0006/
access	www.access.redhat.com/errata/RHSA-2024:9128

28 Nov 2024 03:06Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.2

EPSS0.00077

SSVC