Summary
The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.
Security Fixes:
* libvirt: off-by-one error in udevListInterfacesByStatus() (CVE-2024-1441)
* libvirt: negative g_new0 length can lead to unbounded memory allocation (CVE-2024-2494)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fixes:
* libvirt: off-by-one error in udevListInterfacesByStatus() [almalinux-9] (JIRA:AlmaLinux-25081)
* libvirt: negative g_new0 length can lead to unbounded memory allocation [almalinux-9] (JIRA:AlmaLinux-29515)
Fixed packages 31
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | libvirt | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-client | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-client-qemu | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-common | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-config-network | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-config-nwfilter | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-interface | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-network | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-nodedev | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-nwfilter | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-qemu | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-secret | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-core | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-disk | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-iscsi | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-logical | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-mpath | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-rbd | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-scsi | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-kvm | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-lock | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-log | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-plugin-lockd | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-plugin-sanlock | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-proxy | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-devel | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-docs | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-libs | 10.0.0-6.2.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-nss | 10.0.0-6.2.el9_4.alma.1 |
Vulnerabilities 2
-
Medium 6.2
Libvirt: negative g_new0 length can lead to unbounded memory allocation
A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a cra…
-
Medium 5.5CVE-2024-1441 Public exploit
Libvirt: off-by-one error in udevlistinterfacesbystatus()
An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an u…