AZL-35848

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-35848.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-35848

Upstream

CVE-2024-1441

Published

2024-03-11T14:15:06Z

Modified

2026-04-21T04:25:10.245886Z

Summary

CVE-2024-1441 affecting package libvirt for versions less than 7.10.0-8

Details

An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the names array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-1441

Affected packages

Azure Linux:2 / libvirt

Package

Name: libvirt
Purl: pkg:rpm/azure-linux/libvirt

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.10.0-8

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-35848.json"