Orta CVSS 5.5
CVE-2024-1441: CVE-2024-1441: güvenlik açığı
Açıklama (NVD)
An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.
Özet bilgiler
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,40 (yüzdelik 35)
- CWE
- CWE-193
- Yama
- Yok / bilinmiyor