5.5

CVE-2024-1441

An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
Collection URLhttps://gitlab.com/libvirt/libvirt/
≫
Package libvirt
Default Statusunaffected
Version 9.7.0
Status affected
VendorRed Hat
≫
Product Red Hat Enterprise Linux 9
Default Statusaffected
Version < *
Version 0:10.0.0-6.2.el9_4
Status unaffected
VendorRed Hat
≫
Product Red Hat Enterprise Linux 6
Default Statusunknown
VendorRed Hat
≫
Product Red Hat Enterprise Linux 7
Default Statusunknown
VendorRed Hat
≫
Product Red Hat Enterprise Linux 8
Default Statusaffected
VendorRed Hat
≫
Product Red Hat Enterprise Linux 8 Advanced Virtualization
Default Statusaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.07% 0.224
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
secalert@redhat.com 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-193 Off-by-one Error

A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.