Threats Tagged 'cve-2024-2494'

A vulnerability in the libvirt component of the virt:rhel and virt-devel:rhel modules for Red Hat Enterprise Linux 8 allows a negative g_new0 length to cause unbounded memory allocation. This issue is identified as CVE-2024-2494 and affects user-space components used to run and manage virtual machines with Kernel-based Virtual Machine (KVM). Red Hat has issued a security advisory with a moderate severity rating and provided updated packages to address this issue.

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fixes: * libvirt: off-by-one error in udevListInterfacesByStatus() (CVE-2024-1441) * libvirt: negative g_new0 length can lead to unbounded memory allocation (CVE-2024-2494) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fixes: * libvirt: off-by-one error in udevListInterfacesByStatus() [rhel-9] (JIRA:RHEL-25081) * libvirt: negative g_new0 length can lead to unbounded memory allocation [rhel-9] (JIRA:RHEL-29515)