CVE-2024-1441Medium· 5.5▾ TwilightPoC availableAn off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 30.3 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.4%
1 GitHub repo (last check)
An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the names array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.
libvirt 9.7.0libvirt (all versions)libvirtlibvirtvirt:rhel/libvirt (all versions)virt:av/libvirt (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Connected by shared product, vendor, weakness, or advisory.
CVE-2024-2494Medium· 6.2Libvirt: negative g_new0 length can lead to unbounded memory allocation
CVE-2026-104033Medium· 5.4A flaw was found in SSSD
CVE-2026-77159Medium· 5.5A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function
CVE-2025-12748Medium· 5.5A flaw was discovered in libvirt in the XML file processing
CVE-2023-3750Medium· 6.5Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service
CVE-2026-61477Low· 2.3Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection