VDB

GCVE-110-MAGEIA-2024-114

GCVE-110-MAGEIA-2024-114
Advisory Published
Vulnetix · Advisory published April 6, 2024
A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a crash due to the negative length being treated as a huge positive number. This flaw allows a local, unprivileged user to perform a denial of service attack by causing the libvirt daemon to crash. (CVE-2024-2494)
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageianextcloud-client3.12.2-1.mga9 (unaffected), 0 (affected)—
Mageialibvirt0 (affected), 9.6.0-1.1.mga9 (unaffected), 0 (affected), 9.6.0-1.1.mga9 (unaffected)—

References

Updated libvirt packages fix security vulnerability
advisory
Updated libvirt packages fix security vulnerability
issue
Updated libvirt packages fix security vulnerability
issue
Updated nextcloud-client packages fix bugs and switch to the new supported branch
advisory
Updated nextcloud-client packages fix bugs and switch to the new supported branch
issue
Updated nextcloud-client packages fix bugs and switch to the new supported branch
issue
Updated nextcloud-client packages fix bugs and switch to the new supported branch
issue
Updated nextcloud-client packages fix bugs and switch to the new supported branch
issue

Browse GCVE Records

73,053 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›