CVE-2024-8235 Libvirt: crash of virtinterfaced via virconnectlistinterfaces()

2024-08-3016:16:57

CWE-476

redhat

github.com

libvirt

virtinterfaced

crash

virconnectlistinterfaces

null-pointer dereference

read-only socket

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

Percentile

16.3%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.