CVE-2024-1441
Fixed in a distro release EPSS <1%CVSS 5.5
An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.
Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8 Advanced Virtualization
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | libvirt | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-client | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-client-qemu | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-common | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-config-network | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-config-nwfilter | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-interface | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-network | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-nodedev | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-nwfilter | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-qemu | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-secret | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-storage | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-storage-core | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-storage-disk | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-storage-iscsi | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-storage-logical | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-storage-mpath | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-storage-rbd | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-storage-scsi | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-kvm | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-lock | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-log | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-plugin-lockd | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-plugin-sanlock | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-daemon-proxy | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-devel | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-docs | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-libs | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux 9 | libvirt-nss | 10.0.0-6.2.el9_4.alma.1 |
| Amazon Linux 2 | libvirt | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-admin | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-bash-completion | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-client | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-config-network | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-config-nwfilter | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-driver-interface | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-driver-lxc | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-driver-network | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-driver-nodedev | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-driver-nwfilter | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-driver-qemu | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-driver-secret | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-driver-storage | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-driver-storage-core | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-driver-storage-disk | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-driver-storage-gluster | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-driver-storage-iscsi | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-driver-storage-logical | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-driver-storage-mpath | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-driver-storage-rbd | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-driver-storage-scsi | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-kvm | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-daemon-lxc | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-devel | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-docs | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-libs | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-lock-sanlock | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-login-shell | 4.5.0-36.amzn2.3.1 |
| Amazon Linux 2 | libvirt-nss | 4.5.0-36.amzn2.3.1 |
| Debian 10 | libvirt | 5.0.0-4+deb10u2 |
| Debian 12 | libvirt | 9.0.0-4+deb12u1 |
| Debian 13 | libvirt | 10.1.0-1 |
| Debian 14 | libvirt | 10.1.0-1 |
| Red Hat Enterprise Linux 9 | libvirt | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-client | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-client-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-client-qemu | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-common | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-common-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-config-network | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-config-nwfilter | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-interface | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-interface-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-network | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-network-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-nodedev | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-nodedev-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-nwfilter | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-nwfilter-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-qemu | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-qemu-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-secret | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-secret-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-core | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-core-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-disk | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-disk-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-iscsi | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-iscsi-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-logical | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-logical-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-mpath | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-mpath-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-rbd | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-rbd-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-scsi | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-scsi-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-kvm | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-lock | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-lock-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-log | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-log-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-plugin-lockd | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-plugin-lockd-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-plugin-sanlock | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-plugin-sanlock-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-proxy | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-proxy-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-debugsource | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-devel | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-docs | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-libs | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-libs-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-nss | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-nss-debuginfo | 0:10.0.0-6.2.el9_4 |
| Red Hat Enterprise Linux 9 | libvirt-wireshark-debuginfo | 0:10.0.0-6.2.el9_4 |
| Rocky Linux 9 | libvirt | 0:10.0.0-6.2.el9_4 |
| SUSE Linux Enterprise Micro 5.5 | libvirt | 9.0.0-150500.6.20.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | libvirt | 9.0.0-150500.6.20.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP5 | libvirt | 9.0.0-150500.6.20.1 |
| SUSE Linux Enterprise Server 12 SP5 | libvirt | 5.1.0-13.39.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | libvirt | 5.1.0-13.39.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | libvirt | 5.1.0-13.39.1 |
| Ubuntu 20.04 LTS | libvirt | 6.0.0-0ubuntu8.19 |
| Ubuntu 22.04 LTS | libvirt | 8.0.0-1ubuntu7.19 |
| Ubuntu 22.04 LTS | libvirt | 8.0.0-1ubuntu7.10 |
| Ubuntu 24.04 LTS | libvirt | 10.0.0-2ubuntu8.1 |
| Ubuntu 24.04 LTS | libvirt | 10.0.0-2ubuntu8.16 |
| Ubuntu 26.04 LTS | libvirt | 12.0.0-1ubuntu5.3 |
| Ubuntu Pro 14.04 LTS | libvirt | 1.2.2-0ubuntu13.1.28+esm2 |
| Ubuntu Pro 16.04 LTS | libvirt | 1.3.1-1ubuntu10.31+esm1 |
| Ubuntu Pro 18.04 LTS | libvirt | 4.0.0-1ubuntu8.21+esm1 |
| Ubuntu Pro 20.04 LTS | libvirt | 6.0.0-0ubuntu8.20+esm1 |
| openSUSE Leap 15.5 | libvirt | 9.0.0-150500.6.20.1 |
| openSUSE Tumbleweed | libvirt | 10.1.0-1.1 |