An off-by-one error flaw was found... CVE-2024-1441

- AV AC AU C I A
发布: 2024-03-11
修订: 2024-09-14

An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.

0%
暂无可用Exp或PoC
当前有0条受影响产品信息