TI-2024-02320 CVE-2024-2494 · GHSA-h9fq-4hj4-g596
Libvirt: negative g_new0 length can lead to unbounded memory allocation
Priority LOW 28
A flaw was found in the RPC library APIs of libvirt.
RHSA-2024:2560
libvirt security and bug fix update
Released 2024-04-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) libvirt-10.0.0-6.2.el9_4, libvirt-client-10.0.0-6.2.el9_4, libvirt-client-qemu-10.0.0-6.2.el9_4 +25
- Red Hat Enterprise Linux CRB (v. 9) libvirt-daemon-plugin-sanlock-10.0.0-6.2.el9_4, libvirt-devel-10.0.0-6.2.el9_4, libvirt-docs-10.0.0-6.2.el9_4
Fixes 2 records
TI-2024-01346 CVE-2024-1441 · GHSA-2cj9-wjmr-5w57
Libvirt: off-by-one error in udevlistinterfacesbystatus()
Priority LOW 25
An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array.