VDB

CISA-2024-1441

CISA-2024-1441 PUBLISHED CVSS 5.5 MEDIUM

Reported by redhat · Published March 11, 2024

An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
9.7.0
Red HatRed Hat Enterprise Linux 90:10.0.0-6.2.el9_4
Red HatRed Hat Enterprise Linux 6
Red HatRed Hat Enterprise Linux 7
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8 Advanced Virtualization
Red HatRed Hat Enterprise Linux 9*, 0:10.0.0-6.2.el9_4
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 7
Red HatRed Hat Enterprise Linux 6
Red HatRed Hat Enterprise Linux 8 Advanced Virtualization
9.7.0, 9.7.0

Timeline

  • Mar 11, 2024 CVE Published
  • Nov 8, 2025 CVE Updated
  • Apr 26, 2026 Distribution Patch
  • Apr 26, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›