(RHSA-2024:4432) Moderate: libvirt security update

2024-07-0912:21:06

access.redhat.com

libvirt

c api

virtualization

linux

remote management

stack use-after-free

cve-2024-4418

security fix

cvss score

acknowledgments

references

unix

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

Confidence

High

JSON

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fix(es):

libvirt: stack use-after-free in virNetClientIOEventLoop() (CVE-2024-4418)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9aarch64libvirt-daemon-driver-secret< 9.0.0-10.7.el9_2libvirt-daemon-driver-secret-9.0.0-10.7.el9_2.aarch64.rpm
RedHat9s390xlibvirt-daemon-config-network< 9.0.0-10.7.el9_2libvirt-daemon-config-network-9.0.0-10.7.el9_2.s390x.rpm
RedHat9ppc64lelibvirt-libs< 9.0.0-10.7.el9_2libvirt-libs-9.0.0-10.7.el9_2.ppc64le.rpm
RedHat9x86_64libvirt-docs< 9.0.0-10.7.el9_2libvirt-docs-9.0.0-10.7.el9_2.x86_64.rpm
RedHat9ppc64lelibvirt-daemon-driver-storage-scsi< 9.0.0-10.7.el9_2libvirt-daemon-driver-storage-scsi-9.0.0-10.7.el9_2.ppc64le.rpm
RedHat9x86_64libvirt-daemon-driver-storage-disk-debuginfo< 9.0.0-10.7.el9_2libvirt-daemon-driver-storage-disk-debuginfo-9.0.0-10.7.el9_2.x86_64.rpm
RedHat9x86_64libvirt-daemon-driver-storage-scsi-debuginfo< 9.0.0-10.7.el9_2libvirt-daemon-driver-storage-scsi-debuginfo-9.0.0-10.7.el9_2.x86_64.rpm
RedHat9aarch64libvirt-nss-debuginfo< 9.0.0-10.7.el9_2libvirt-nss-debuginfo-9.0.0-10.7.el9_2.aarch64.rpm
RedHat9aarch64libvirt-docs< 9.0.0-10.7.el9_2libvirt-docs-9.0.0-10.7.el9_2.aarch64.rpm
RedHat9x86_64libvirt-daemon-driver-storage< 9.0.0-10.7.el9_2libvirt-daemon-driver-storage-9.0.0-10.7.el9_2.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	aarch64	libvirt-daemon-driver-secret	< 9.0.0-10.7.el9_2	libvirt-daemon-driver-secret-9.0.0-10.7.el9_2.aarch64.rpm
RedHat	9	s390x	libvirt-daemon-config-network	< 9.0.0-10.7.el9_2	libvirt-daemon-config-network-9.0.0-10.7.el9_2.s390x.rpm
RedHat	9	ppc64le	libvirt-libs	< 9.0.0-10.7.el9_2	libvirt-libs-9.0.0-10.7.el9_2.ppc64le.rpm
RedHat	9	x86_64	libvirt-docs	< 9.0.0-10.7.el9_2	libvirt-docs-9.0.0-10.7.el9_2.x86_64.rpm
RedHat	9	ppc64le	libvirt-daemon-driver-storage-scsi	< 9.0.0-10.7.el9_2	libvirt-daemon-driver-storage-scsi-9.0.0-10.7.el9_2.ppc64le.rpm
RedHat	9	x86_64	libvirt-daemon-driver-storage-disk-debuginfo	< 9.0.0-10.7.el9_2	libvirt-daemon-driver-storage-disk-debuginfo-9.0.0-10.7.el9_2.x86_64.rpm
RedHat	9	x86_64	libvirt-daemon-driver-storage-scsi-debuginfo	< 9.0.0-10.7.el9_2	libvirt-daemon-driver-storage-scsi-debuginfo-9.0.0-10.7.el9_2.x86_64.rpm
RedHat	9	aarch64	libvirt-nss-debuginfo	< 9.0.0-10.7.el9_2	libvirt-nss-debuginfo-9.0.0-10.7.el9_2.aarch64.rpm
RedHat	9	aarch64	libvirt-docs	< 9.0.0-10.7.el9_2	libvirt-docs-9.0.0-10.7.el9_2.aarch64.rpm
RedHat	9	x86_64	libvirt-daemon-driver-storage	< 9.0.0-10.7.el9_2	libvirt-daemon-driver-storage-9.0.0-10.7.el9_2.x86_64.rpm