Untriaged
Libvirt: off-by-one error in udevlistinterfacesbystatus()
An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.
Affected products
libvirt
- ==9.7.0
- *
- ==10.1.0
virt:av/libvirt
virt:rhel/libvirt
Matching in nixpkgs
pkgs.libvirt
Toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes
-
nixos-unstable -
- nixpkgs-unstable 11.6.0
pkgs.libvirt-glib
Wrapper library of libvirt for glib-based applications
-
nixos-unstable -
- nixpkgs-unstable 5.0.0
pkgs.python312Packages.libvirt
Libvirt Python bindings
-
nixos-unstable -
- nixpkgs-unstable 11.6.0
pkgs.python313Packages.libvirt
Libvirt Python bindings
-
nixos-unstable -
- nixpkgs-unstable 11.6.0
pkgs.rubyPackages.ruby-libvirt
None
-
nixos-unstable -
- nixpkgs-unstable 0.8.4
pkgs.prometheus-libvirt-exporter
Prometheus metrics exporter for libvirt
-
nixos-unstable -
- nixpkgs-unstable 2.3.3
pkgs.terraform-providers.libvirt
None
-
nixos-unstable -
- nixpkgs-unstable 0.8.3
pkgs.rubyPackages_3_1.ruby-libvirt
None
-
nixos-unstable -
- nixpkgs-unstable 0.8.4
pkgs.rubyPackages_3_2.ruby-libvirt
None
-
nixos-unstable -
- nixpkgs-unstable 0.8.4
pkgs.rubyPackages_3_3.ruby-libvirt
None
-
nixos-unstable -
- nixpkgs-unstable 0.8.4
pkgs.rubyPackages_3_4.ruby-libvirt
None
-
nixos-unstable -
- nixpkgs-unstable 0.8.4
Package maintainers
-
@globin Robin Gloster <mail@glob.in>
-
@fpletz Franz Pletz <fpletz@fnordicwalking.de>
-
@lovesegfault Bernardo Meurer <meurerbernardo@gmail.com>
-
@farcaller Vladimir Pouzanov <farcaller@gmail.com>