https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:30:49 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:2560 <p><strong>Affected:</strong> AlmaLinux:9: libvirt, AlmaLinux:9: libvirt-client, AlmaLinux:9: libvirt-client-qemu, AlmaLinux:9: libvirt-daemon, AlmaLinux:9: libvirt-daemon-common, AlmaLinux:9: libvirt-daemon-config-network, AlmaLinux:9: libvirt-daemon-config-nwfilter, AlmaLinux:9: libvirt-daemon-driver-interface, AlmaLinux:9: libvirt-daemon-driver-network, AlmaLinux:9: libvirt-daemon-driver-nodedev and 21 more</p> <p>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.</p> <p>Security Fixes:</p> <p>* libvirt: off-by-one error in udevListInterfacesByStatus() (CVE-2024-1441) * libvirt: negative g_new0 length can lead to unbounded memory allocation (CVE-2024-2494)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Bug Fixes:</p> <p>* libvirt: off-by-one error in udevListInterfacesByStatus() [almalinux-9] (JIRA:AlmaLinux-25081) * libvirt: negative g_new0 length can lead to unbounded memory allocation [almalinux-9] (JIRA:AlmaLinux-29515)</p> <p><strong>Affected:</strong> AlmaLinux:9: libvirt, AlmaLinux:9: libvirt-client, AlmaLinux:9: libvirt-client-qemu, AlmaLinux:9: libvirt-daemon, AlmaLinux:9: libvirt-daemon-common, AlmaLinux:9: libvirt-daemon-config-network, AlmaLinux:9: libvirt-daemon-config-nwfilter, AlmaLinux:9: libvirt-daemon-driver-interface, AlmaLinux:9: libvirt-daemon-driver-network, AlmaLinux:9: libvirt-daemon-driver-nodedev and 21 more</p> <p>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.</p> <p>Security Fixes:</p> <p>* libvirt: off-by-one error in udevListInterfacesByStatus() (CVE-2024-1441) * libvirt: negative g_new0 length can lead to unbounded memory allocation (CVE-2024-2494)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Bug Fixes:</p> <p>* libvirt: off-by-one error in udevListInterfacesByStatus() [almalinux-9] (JIRA:AlmaLinux-25081) * libvirt: negative g_new0 length can lead to unbounded memory allocation [almalinux-9] (JIRA:AlmaLinux-29515)</p> https://cve.radiocsirt.org/vuln/alsa-2024:2560 https://cve.radiocsirt.org/vuln/bdu:2024-02380 bdu:2024-02380 https://cve.radiocsirt.org/vuln/bdu:2024-02380 https://cve.radiocsirt.org/vuln/bell-cve-2024-2494 <p><strong>Affected:</strong> Alpaquita:23: libvirt, Alpaquita:stream: libvirt</p> <p><strong>Affected:</strong> Alpaquita:23: libvirt, Alpaquita:stream: libvirt</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-2494 https://cve.radiocsirt.org/vuln/euvd-2026-270716 EUVD-2026-270716 https://cve.radiocsirt.org/vuln/euvd-2026-270716 https://cve.radiocsirt.org/vuln/fkie_cve-2024-2494 <p>A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a crash due to the negative length being treated as a huge positive number. This flaw allows a local, unprivileged user to perform a denial of service attack by causing the libvirt daemon to crash.</p> <p>A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a crash due to the negative length being treated as a huge positive number. This flaw allows a local, unprivileged user to perform a denial of service attack by causing the libvirt daemon to crash.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-2494 https://cve.radiocsirt.org/vuln/ghsa-h9fq-4hj4-g596 <p>A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a crash due to the negative length being treated as a huge positive number. This flaw allows a local, unprivileged user to perform a denial of service attack by causing the libvirt daemon to crash.</p> <p>A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a crash due to the negative length being treated as a huge positive number. This flaw allows a local, unprivileged user to perform a denial of service attack by causing the libvirt daemon to crash.</p> https://cve.radiocsirt.org/vuln/ghsa-h9fq-4hj4-g596 https://cve.radiocsirt.org/vuln/gsd-2024-2494 gsd-2024-2494 https://cve.radiocsirt.org/vuln/gsd-2024-2494 https://cve.radiocsirt.org/vuln/msrc_cve-2024-2494 msrc_CVE-2024-2494 https://cve.radiocsirt.org/vuln/msrc_cve-2024-2494 https://cve.radiocsirt.org/vuln/oesa-2024-1391 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: libvirt, openEuler:22.03-LTS: libvirt, openEuler:22.03-LTS-SP1: libvirt, openEuler:22.03-LTS-SP2: libvirt, openEuler:22.03-LTS-SP3: libvirt</p> <p>Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes). The main package includes the libvirtd server exporting the virtualization support. Security Fix(es): An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.(CVE-2024-1441) A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a crash due to the negative length being treated as a huge positive number. This flaw allows a local, unprivileged user to perform a denial of service attack by causing the libvirt daemon to crash.(CVE-2024-2494)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: libvirt, openEuler:22.03-LTS: libvirt, openEuler:22.03-LTS-SP1: libvirt, openEuler:22.03-LTS-SP2: libvirt, openEuler:22.03-LTS-SP3: libvirt</p> <p>Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes). The main package includes the libvirtd server exporting the virtualization support. Security Fix(es): An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.(CVE-2024-1441) A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a crash due to the negative length being treated as a huge positive number. This flaw allows a local, unprivileged user to perform a denial of service attack by causing the libvirt daemon to crash.(CVE-2024-2494)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1391 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13796-1 <p>libvirt-10.1.0-2.1 on GA media</p> <p>libvirt-10.1.0-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13796-1 https://cve.radiocsirt.org/vuln/rhsa-2024:3253 <p>libvirt: negative g_new0 length can lead to unbounded memory allocation</p> <p>libvirt: negative g_new0 length can lead to unbounded memory allocation</p> https://cve.radiocsirt.org/vuln/rhsa-2024:3253 https://cve.radiocsirt.org/vuln/suse-su-2024:1078-1 <p>Security update for libvirt</p> <p>Security update for libvirt</p> https://cve.radiocsirt.org/vuln/suse-su-2024:1078-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-2494 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libvirt, Ubuntu:Pro:16.04:LTS: libvirt, Ubuntu:Pro:18.04:LTS: libvirt, Ubuntu:20.04:LTS: libvirt, Ubuntu:22.04:LTS: libvirt, Ubuntu:24.04:LTS: libvirt</p> <p>A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a crash due to the negative length being treated as a huge positive number. This flaw allows a local, unprivileged user to perform a denial of service attack by causing the libvirt daemon to crash.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libvirt, Ubuntu:Pro:16.04:LTS: libvirt, Ubuntu:Pro:18.04:LTS: libvirt, Ubuntu:20.04:LTS: libvirt, Ubuntu:22.04:LTS: libvirt, Ubuntu:24.04:LTS: libvirt</p> <p>A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a crash due to the negative length being treated as a huge positive number. This flaw allows a local, unprivileged user to perform a denial of service attack by causing the libvirt daemon to crash.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-2494 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0692 <p>Ein lokaler Angreifer kann eine Schwachstelle in libvirt ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in libvirt ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0692