CVE-2024-4418
Medium · 6.2CVSS
6.2
EPSS
0.5%
Published
May 8, 2024
CISA due date
—
Cloudanix analysis
A timing error in a virtualization management service could allow users on the same computer to reach management functions without logging in, potentially interfering with virtual machines.
- Exploitation
- Local Privilege
- Attacker needs
- Local User
- Complexity
- Moderate
- Impact
- Privilege Gain
- Component
- Library
- Class
- Use After Free
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Race condition in virNetClientIOEventLoop causes stack-allocated virNetClientIOEventData pointer to be dereferenced after its frame is freed when the virNetClientIOEventFD callback executes concurrently, resulting in use-after-free.
Why it matters to the business
Local users without privileges can reach the virtproxyd daemon without authentication, potentially disrupting virtualization management or bypassing intended access controls on systems where fine-grained permissions are configured.
How an attack unfolds
An attacker with local access invokes requests against virtproxyd to trigger the event loop; the race frees the stack frame while the callback still references the data pointer, allowing unauthenticated access to the daemon.
How to fix it
Update libvirt packages to a version containing the fix for the race condition in virNetClientIOEventLoop and restart virtproxyd; where updates are unavailable, restrict local access to the daemon socket and disable fine-grained access control until patched.
How to confirm the fix worked
Confirm the installed libvirt version contains the corrected event-loop logic, review daemon configuration for socket permissions, and test that unauthenticated local connections are rejected.
Typical attack path
- Obtain local unprivileged shell on a host running libvirt with virtproxyd enabled
- Issue network or API requests that exercise virNetClientIOEventLoop
- Win the race to free the stack-allocated structure while the callback still holds a reference
- Leverage resulting memory state to perform operations without authentication
How to detect it
Review libvirt and virtproxyd logs for unexpected unauthenticated connections or event-loop errors around the time of suspected activity; examine process listings and socket access attempts from unprivileged users.
What your security team should do
- Apply the libvirt security update as soon as packages are available
- Audit systems for virtproxyd exposure and limit local user access to the control socket
- Monitor EPSS and exploit maturity indicators for any future increase in observed exploitation
The record
A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the virNetClientIOEventLoop() method, the `data` pointer to a stack-allocated virNetClientIOEventData structure ended up being used in the virNetClientIOEventFD callback while the data pointer's stack frame was concurrently being "freed" when returning from virNetClientIOEventLoop(). The 'virtproxyd' daemon can be used to trigger requests. If libvirt is configured with fine-grained access control, this issue, in theory, allows a user to escape their otherwise limited access. This flaw allows a local, unprivileged user to access virtproxyd without authenticating. Remote users would need to authenticate before they could access it.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | SLOF | 0 | 20210217-2.module_el8.10.0+3768+dfd76e10 |
| AlmaLinux:8 | hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | hivex-devel | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | hivex-devel | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libguestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-appliance | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-bash-completion | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-devel | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-gfs2 | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-gobject | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-gobject-devel | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-inspect-icons | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-java | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-java-devel | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-javadoc | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-man-pages-ja | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-man-pages-uk | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-rescue | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-rsync | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-tools | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-tools-c | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-winsupport | 0 | 8.10-1.module_el8.10.0+3768+dfd76e10 |
| AlmaLinux:8 | libguestfs-xfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libiscsi | 0 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libiscsi | 0 | 1.18.0-8.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libiscsi-devel | 0 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libiscsi-devel | 0 | 1.18.0-8.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libiscsi-utils | 0 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libiscsi-utils | 0 | 1.18.0-8.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libnbd | 0 | 1.6.0-5.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libnbd | 0 | 1.6.0-5.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libnbd-bash-completion | 0 | 1.6.0-5.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libnbd-devel | 0 | 1.6.0-5.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libnbd-devel | 0 | 1.6.0-5.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libtpms | 0 | 0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | libtpms-devel | 0 | 0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | libvirt | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-client | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-config-network | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-config-nwfilter | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-interface | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-network | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-nodedev | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-nwfilter | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-qemu | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-secret | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-core | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-disk | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-gluster | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-iscsi | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-iscsi-direct | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-logical | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-mpath | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-rbd | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-scsi | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-kvm | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-dbus | 0 | 1.3.0-2.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libvirt-dbus | 0 | 1.3.0-2.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libvirt-devel | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-docs | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-libs | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-lock-sanlock | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-nss | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-wireshark | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | lua-guestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | nbdfuse | 0 | 1.6.0-5.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | nbdfuse | 0 | 1.6.0-5.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | nbdkit | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-bash-completion | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-basic-filters | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-basic-plugins | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-curl-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-devel | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-example-plugins | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-gzip-filter | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-gzip-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-linuxdisk-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-nbd-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-python-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-server | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-ssh-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-tar-filter | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-tar-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-tmpdisk-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-vddk-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-xz-filter | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | netcf | 0 | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | netcf | 0 | 0.2.8-12.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | netcf-devel | 0 | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | netcf-devel | 0 | 0.2.8-12.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | netcf-libs | 0 | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | netcf-libs | 0 | 0.2.8-12.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ocaml-hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | ocaml-hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ocaml-hivex-devel | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | ocaml-hivex-devel | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ocaml-libguestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | ocaml-libguestfs-devel | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | ocaml-libnbd | 0 | 1.6.0-5.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | ocaml-libnbd | 0 | 1.6.0-5.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ocaml-libnbd-devel | 0 | 1.6.0-5.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | ocaml-libnbd-devel | 0 | 1.6.0-5.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | perl-Sys-Guestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | perl-Sys-Virt | 0 | 8.0.0-1.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | perl-Sys-Virt | 0 | 8.0.0-1.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | perl-hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | perl-hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | python3-hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | python3-hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | python3-libguestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | python3-libnbd | 0 | 1.6.0-5.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | python3-libnbd | 0 | 1.6.0-5.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | python3-libvirt | 0 | 8.0.0-2.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | qemu-guest-agent | 0 | 15:6.2.0-49.module_el8.10.0+3839+c94ce74b |
| AlmaLinux:8 | qemu-img | 0 | 15:6.2.0-49.module_el8.10.0+3839+c94ce74b |
| AlmaLinux:8 | qemu-kvm | 0 | 15:6.2.0-49.module_el8.10.0+3839+c94ce74b |
| AlmaLinux:8 | qemu-kvm-block-curl | 0 | 15:6.2.0-49.module_el8.10.0+3839+c94ce74b |
| AlmaLinux:8 | qemu-kvm-block-gluster | 0 | 15:6.2.0-49.module_el8.10.0+3839+c94ce74b |
| AlmaLinux:8 | qemu-kvm-block-iscsi | 0 | 15:6.2.0-49.module_el8.10.0+3839+c94ce74b |
| AlmaLinux:8 | qemu-kvm-block-rbd | 0 | 15:6.2.0-49.module_el8.10.0+3839+c94ce74b |
| AlmaLinux:8 | qemu-kvm-block-ssh | 0 | 15:6.2.0-49.module_el8.10.0+3839+c94ce74b |
| AlmaLinux:8 | qemu-kvm-common | 0 | 15:6.2.0-49.module_el8.10.0+3839+c94ce74b |
| AlmaLinux:8 | qemu-kvm-core | 0 | 15:6.2.0-49.module_el8.10.0+3839+c94ce74b |
| AlmaLinux:8 | qemu-kvm-docs | 0 | 15:6.2.0-49.module_el8.10.0+3839+c94ce74b |
| AlmaLinux:8 | qemu-kvm-hw-usbredir | 0 | 15:6.2.0-49.module_el8.10.0+3839+c94ce74b |
| AlmaLinux:8 | qemu-kvm-tests | 0 | 15:6.2.0-49.module_el8.10.0+3839+c94ce74b |
| AlmaLinux:8 | qemu-kvm-ui-opengl | 0 | 15:6.2.0-49.module_el8.10.0+3839+c94ce74b |
| AlmaLinux:8 | qemu-kvm-ui-spice | 0 | 15:6.2.0-49.module_el8.10.0+3839+c94ce74b |
| AlmaLinux:8 | ruby-hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | ruby-hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ruby-libguestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | seabios | 0 | 1.16.0-4.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | seabios-bin | 0 | 1.16.0-4.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | seavgabios-bin | 0 | 1.16.0-4.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | sgabios | 0 | 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | sgabios-bin | 0 | 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | supermin | 0 | 5.2.1-2.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | supermin-devel | 0 | 5.2.1-2.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm-devel | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm-libs | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm-tools | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm-tools-pkcs11 | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | virt-dib | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | virt-v2v | 0 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | virt-v2v-bash-completion | 0 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | virt-v2v-man-pages-ja | 0 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | virt-v2v-man-pages-uk | 0 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:9 | libvirt | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-client | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-client-qemu | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-common | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-config-network | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-config-nwfilter | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-driver-interface | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-driver-network | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-driver-nodedev | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-driver-nwfilter | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-driver-qemu | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-driver-secret | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-driver-storage | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-driver-storage-core | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-driver-storage-disk | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-driver-storage-iscsi | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-driver-storage-logical | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-driver-storage-mpath | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-driver-storage-rbd | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-driver-storage-scsi | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-kvm | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-lock | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-log | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-plugin-lockd | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-plugin-sanlock | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-daemon-proxy | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-devel | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-docs | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-libs | 0 | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux:9 | libvirt-nss | 0 | 10.0.0-6.6.el9_4.alma.1 |
| Debian:13 | libvirt | 0 | 10.3.0-1 |
| Red Hat:enterprise_linux:8::appstream | SLOF | 0 | 0:20210217-2.module+el8.10.0+20141+6faa2812 |
| Red Hat:enterprise_linux:8::appstream | hivex | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | hivex-debuginfo | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | hivex-debugsource | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | hivex-devel | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-appliance | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-bash-completion | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-debuginfo | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-debugsource | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-devel | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-gfs2 | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-gobject | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-gobject-debuginfo | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-gobject-devel | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-inspect-icons | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-java | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
Related vulnerabilities
- CVE-2024-7383 A flaw was found in libnbd. Also affects SLOF
- CVE-2024-7409 A flaw was found in the QEMU NBD Server. Also affects SLOF
- CVE-2024-4467 A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. Also affects SLOF
- CVE-2024-3446 A double free vulnerability was found in QEMU virtio devices (virtio-gpu… Also affects SLOF
- CVE-2023-1018 An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte… Also affects SLOF
- CVE-2019-11135 TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow… Also affects libiscsi
- CVE-2024-8235 A flaw was found in libvirt. Also affects libvirt
- CVE-2024-2494 A flaw was found in the RPC library APIs of libvirt. Also affects libvirt