CVE-2024-8235

EUVD-2024-49040
A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.2 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 23%
Affected Products (NVD)
VendorProductVersion
redhatlibvirt
10.4.0 ≤
𝑥
< 10.7.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libvirt
bookworm
9.0.0-4+deb12u2
not-affected
bullseye
7.0.0-3+deb11u3
not-affected
forky
11.10.0-1
fixed
sid
11.10.0-1
fixed
trixie
11.3.0-3+deb13u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libvirt
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
oracular
Fixed 10.6.0-1ubuntu3
released
trusty
not-affected
xenial
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libvirt
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-client
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-client-qemu
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-common
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-config-network
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-config-nwfilter
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-driver-interface
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-driver-libxl
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-driver-network
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-driver-nodedev
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-driver-nwfilter
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-driver-qemu
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-driver-secret
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-driver-storage
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-driver-storage-core
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-driver-storage-disk
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-driver-storage-iscsi
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-driver-storage-iscsi-direct
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-driver-storage-logical
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-driver-storage-mpath
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-driver-storage-rbd
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-driver-storage-scsi
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-hooks
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-lock
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-log
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-plugin-lockd
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-plugin-sanlock
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-proxy
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-qemu
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-daemon-xen
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-devel
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-doc
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
libvirt-nss
suse enterprise sap 15 SP7
11.0.0-150700.2.3
fixed
suse enterprise server 15 SP7
11.0.0-150700.2.3
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
libvirt
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-client
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-client-qemu
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-common
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-config-network
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-config-nwfilter
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-driver-interface
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-driver-network
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-driver-nodedev
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-driver-nwfilter
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-driver-qemu
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-driver-secret
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-driver-storage
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-driver-storage-core
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-driver-storage-disk
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-driver-storage-iscsi
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-driver-storage-logical
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-driver-storage-mpath
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-driver-storage-rbd
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-driver-storage-scsi
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-kvm
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-lock
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-log
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-plugin-lockd
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-plugin-sanlock
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-daemon-proxy
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-devel
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-docs
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-libs
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-nss
RHEL 9
0:10.5.0-7.el9_5
fixed
libvirt-ssh-proxy
RHEL 9
0:10.5.0-7.el9_5
fixed
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2024:9128
https://access.redhat.com/security/cve/CVE-2024-8235
https://bugzilla.redhat.com/show_bug.cgi?id=2308680
https://lists.libvirt.org/archives/list/devel@lists.libvirt.org/thread/X6WOVCL6QF3FQRFIIXL736RFZVSUWLWJ/
https://security.netapp.com/advisory/ntap-20240920-0006/