Logo
›
›vulnerability›CVE-2024-2496
Name
CVE-2024-2496
Source
NVD ( link)Debian ( link)
Description
A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces() function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of service attack by causing the libvirt daemon to crash.
CWEs
CWE-476
Published Date
Updated Date
Workaround
-
Advisories
https://access.redhat.com/errata/RHSA-2024:2236Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-2496Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2269672Issue Tracking
https://access.redhat.com/errata/RHSA-2024:2236Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-2496Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2269672Issue Tracking
https://lists.debian.org/debian-lts-announce/2024/04/msg00000.htmlMailing List

Analysis#

Affected Component
Analysis
libvirt
Exploitable

Vulnerability Ratings#

5
CVSSv31
5.5
CVSSv31
NaN
other

Others affected component#

Name
Project
Project Version
Version
Status
libvirt
buildroot
master
7.10.0
Exploitable