Denial of Service Vulnerability in libvirt's udevListInterfacesByStatus() Function
CVE-2024-1441

5.5MEDIUM

Key Information:

Vendor
Red Hat
Status
Red Hat Enterprise Linux 9
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Vendor
CVE Published:
11 March 2024

Summary

An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the names array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.

Affected Version(s)

Red Hat Enterprise Linux 9 0:10.0.0-6.2.el9_4

References

https://access.redhat.com/errata/RHSA-2024:2560
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-1441
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2263841
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Alexander Kuznetsov for reporting this issue.
.