Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 18/03/2024 Updated: 30/04/2024

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces() function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of service attack by causing the libvirt daemon to crash.

An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to c ...

CWE-476 https://access.redhat.com/security/cve/CVE-2024-2496 https://bugzilla.redhat.com/show_bug.cgi?id=2269672 https://lists.debian.org/debian-lts-announce/2024/04/msg00000.html https://access.redhat.com/errata/RHSA-2024:2236 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2024-2513.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-2496

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect