Lucene search
UbuntuUSN-6763-1HistoryMay 07, 2024 - 12:00 a.m.
libvirt vulnerability
2024-05-0700:00:00
ubuntu.com
13
ubuntu 24.04 lts
libvirt
memory operations
virtproxyd
unauthorized access
CVSS3
6.2
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.2
Confidence
Low
EPSS
0
Percentile
16.3%
Releases
- Ubuntu 24.04 LTS
Packages
- libvirt - Libvirt virtualization toolkit
Details
Martin Širokov discovered that libvirt incorrectly handled certain memory
operations. A local attacker could possibly use this issue to access
virtproxyd without authorization.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 24.04 | noarch | libvirt-daemon | < 10.0.0-2ubuntu8.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libnss-libvirt | < 10.0.0-2ubuntu8.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libnss-libvirt-dbgsym | < 10.0.0-2ubuntu8.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libvirt-clients | < 10.0.0-2ubuntu8.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libvirt-clients-dbgsym | < 10.0.0-2ubuntu8.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libvirt-clients-qemu | < 10.0.0-2ubuntu8.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libvirt-daemon-config-network | < 10.0.0-2ubuntu8.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libvirt-daemon-config-nwfilter | < 10.0.0-2ubuntu8.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libvirt-daemon-dbgsym | < 10.0.0-2ubuntu8.2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libvirt-daemon-driver-lxc | < 10.0.0-2ubuntu8.2 | UNKNOWN |
References
Related
redos
redos
ROS-20240607-04
2024-06-07 00:00:00
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-ee96e0c470)
2024-06-11 00:00:00
Fedora: Security Advisory (FEDORA-2024-c2e7b82022)
2024-06-21 00:00:00
Ubuntu: Security Advisory (USN-6763-1)
2024-05-08 00:00:00
debiancve
debiancve
CVE-2024-4418
2024-05-08 03:15:07
almalinux
almalinux
Low: virt:rhel and virt-devel:rhel security and bug fix update
2024-07-08 00:00:00
Moderate: libvirt security update
2024-07-23 00:00:00
oraclelinux
oraclelinux
virt:ol and virt-devel:rhel security and bug fix update
2024-07-10 00:00:00
libvirt security update
2024-07-23 00:00:00
virt:kvm_utils3 security update
2024-09-02 00:00:00
nessus
nessus
Rocky Linux 8 : virt:rhel and virt-devel:rhel (RLSA-2024:4351)
2024-07-15 00:00:00
RHEL 9 : libvirt (RHSA-2024:4757)
2024-07-23 00:00:00
Oracle Linux 9 : libvirt (ELSA-2024-4757)
2024-07-24 00:00:00
vulnrichment
vulnrichment
CVE-2024-4418 Libvirt: stack use-after-free in virnetclientioeventloop()
2024-05-08 03:03:05
cbl_mariner
cbl_mariner
CVE-2024-4418 affecting package libvirt for versions less than 7.10.0-10
2024-06-12 22:23:00
osv
osv
Low: virt:rhel and virt-devel:rhel security and bug fix update
2024-07-08 00:00:00
libvirt vulnerability
2024-05-07 11:21:40
Moderate: libvirt security update
2024-07-23 00:00:00
ubuntucve
ubuntucve
CVE-2024-4418
2024-05-05 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: libvirt-9.7.0-4.fc39
2024-06-21 01:16:27
[SECURITY] Fedora 40 Update: libvirt-10.1.0-2.fc40
2024-06-11 01:51:32
redhatcve
redhatcve
CVE-2024-4418
2024-05-02 12:59:36
cve
cve
CVE-2024-4418
2024-05-08 03:15:07
veracode
veracode
Use After Free
2024-05-09 03:34:43
cvelist
cvelist
CVE-2024-4418 Libvirt: stack use-after-free in virnetclientioeventloop()
2024-05-08 03:03:05
nvd
nvd
CVE-2024-4418
2024-05-08 03:15:07
rocky
rocky
virt:rhel and virt-devel:rhel security and bug fix update
2024-07-15 12:17:49
redhat
redhat
photon
photon
Moderate Photon OS Security Update - PHSA-2024-4.0-0609
2024-05-13 00:00:00
Moderate Photon OS Security Update - PHSA-2024-5.0-0268
2024-05-13 00:00:00
CVSS3
6.2
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.2
Confidence
Low
EPSS
0
Percentile
16.3%
Related for USN-6763-1