cbcvebase.
CVE-2024-1441
published 2024-03-11

CVE-2024-1441: An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array…

PriorityP422medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.40%
32.1th percentile
An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.

Affected

13 ranges
VendorProductVersion rangeFixed in
debianlibvirt< libvirt 9.0.0-4+deb12u1 (bookworm)libvirt 9.0.0-4+deb12u1 (bookworm)
msrcazl3_libvirt_10.0.0-5_on_azure_linux_3.0
msrccbl2_libvirt_7.10.0-10_on_cbl_mariner_2.0
msrccbl2_libvirt_7.10.0-8_on_cbl_mariner_2.0
msrccbl_mariner_2.0_arm
msrccbl_mariner_2.0_x64
redhatlibvirt>= 0 < 7.0.0-3+deb11u37.0.0-3+deb11u3
redhatlibvirt>= 0 < 9.0.0-4+deb12u19.0.0-4+deb12u1
redhatlibvirt>= 0 < 10.1.0-110.1.0-1
redhatlibvirt>= 0 < 10.1.0-110.1.0-1
redhatlibvirt>= 0 < 6.0.0-0ubuntu8.196.0.0-0ubuntu8.19
redhatlibvirt>= 0 < 8.0.0-1ubuntu7.108.0.0-1ubuntu7.10
redhatlibvirt>= 0 < 10.0.0-2ubuntu8.110.0.0-2ubuntu8.1

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_msrc5.5MEDIUM
vendor_redhat5.5MEDIUM
vendor_ubuntu5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.