https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T22:42:09.224317+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:2560 ALSA-2024:2560 — Moderate: libvirt security and bug fix update 2026-10-07T22:42:09.528252+00:00

Affected: AlmaLinux:9: libvirt, AlmaLinux:9: libvirt-client, AlmaLinux:9: libvirt-client-qemu, AlmaLinux:9: libvirt-daemon, AlmaLinux:9: libvirt-daemon-common, AlmaLinux:9: libvirt-daemon-config-network, AlmaLinux:9: libvirt-daemon-config-nwfilter, AlmaLinux:9: libvirt-daemon-driver-interface, AlmaLinux:9: libvirt-daemon-driver-network, AlmaLinux:9: libvirt-daemon-driver-nodedev and 21 more

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fixes:

* libvirt: off-by-one error in udevListInterfacesByStatus() (CVE-2024-1441) * libvirt: negative g_new0 length can lead to unbounded memory allocation (CVE-2024-2494)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fixes:

* libvirt: off-by-one error in udevListInterfacesByStatus() [almalinux-9] (JIRA:AlmaLinux-25081) * libvirt: negative g_new0 length can lead to unbounded memory allocation [almalinux-9] (JIRA:AlmaLinux-29515)

 https://cve.radiocsirt.org/vuln/bdu:2024-02380 bdu:2024-02380 2026-10-07T22:42:09.528364+00:00 bdu:2024-02380 https://cve.radiocsirt.org/vuln/bell-cve-2024-2494 BELL-CVE-2024-2494 2026-10-07T22:42:09.528383+00:00

Affected: Alpaquita:23: libvirt, Alpaquita:stream: libvirt

 https://cve.radiocsirt.org/vuln/euvd-2026-270716 EUVD-2026-270716 2026-10-07T22:42:09.528404+00:00 EUVD-2026-270716 https://cve.radiocsirt.org/vuln/fkie_cve-2024-2494 fkie_cve-2024-2494 2026-10-07T22:42:09.528416+00:00

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a crash due to the negative length being treated as a huge positive number. This flaw allows a local, unprivileged user to perform a denial of service attack by causing the libvirt daemon to crash.

 https://cve.radiocsirt.org/vuln/ghsa-h9fq-4hj4-g596 GHSA-h9fq-4hj4-g596 2026-10-07T22:42:09.528438+00:00

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a crash due to the negative length being treated as a huge positive number. This flaw allows a local, unprivileged user to perform a denial of service attack by causing the libvirt daemon to crash.

 https://cve.radiocsirt.org/vuln/gsd-2024-2494 gsd-2024-2494 2026-10-07T22:42:09.528453+00:00 gsd-2024-2494 https://cve.radiocsirt.org/vuln/msrc_cve-2024-2494 msrc_CVE-2024-2494 — Libvirt: negative g_new0 length can lead to unbounded memory allocation 2026-10-07T22:42:09.528464+00:00 msrc_CVE-2024-2494 https://cve.radiocsirt.org/vuln/oesa-2024-1391 OESA-2024-1391 — libvirt security update 2026-10-07T22:42:09.528480+00:00

Affected: openEuler:20.03-LTS-SP1: libvirt, openEuler:22.03-LTS: libvirt, openEuler:22.03-LTS-SP1: libvirt, openEuler:22.03-LTS-SP2: libvirt, openEuler:22.03-LTS-SP3: libvirt

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes). The main package includes the libvirtd server exporting the virtualization support. Security Fix(es): An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.(CVE-2024-1441) A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a crash due to the negative length being treated as a huge positive number. This flaw allows a local, unprivileged user to perform a denial of service attack by causing the libvirt daemon to crash.(CVE-2024-2494)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13796-1 openSUSE-SU-2024:13796-1 — libvirt-10.1.0-2.1 on GA media 2026-10-07T22:42:09.528511+00:00

libvirt-10.1.0-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2024:3253 RHSA-2024:3253 — Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update 2026-10-07T22:42:09.528528+00:00

libvirt: negative g_new0 length can lead to unbounded memory allocation

 https://cve.radiocsirt.org/vuln/suse-su-2024:1078-1 SUSE-SU-2024:1078-1 — Security update for libvirt 2026-10-07T22:42:09.528542+00:00

Security update for libvirt

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-2494 UBUNTU-CVE-2024-2494 2026-10-07T22:42:09.528556+00:00

Affected: Ubuntu:Pro:14.04:LTS: libvirt, Ubuntu:Pro:16.04:LTS: libvirt, Ubuntu:Pro:18.04:LTS: libvirt, Ubuntu:20.04:LTS: libvirt, Ubuntu:22.04:LTS: libvirt, Ubuntu:24.04:LTS: libvirt

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a crash due to the negative length being treated as a huge positive number. This flaw allows a local, unprivileged user to perform a denial of service attack by causing the libvirt daemon to crash.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0692 WID-SEC-W-2024-0692 — libvirt: Schwachstelle ermöglicht Denial of Service 2026-10-07T22:42:09.528580+00:00

Ein lokaler Angreifer kann eine Schwachstelle in libvirt ausnutzen, um einen Denial of Service Angriff durchzuführen.