CVE catalog

CVE-2024-8235

libvirt: CVE-2024-8235

Severity: Medium · CVSS 6.2CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published: Aug 29, 2024, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.24% · Oct 25, 2026

A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	libvirt	sid	`12.8.0-1`	fixed
Debian	libvirt	forky	`12.8.0-1`	fixed
Debian	libvirt	trixie	`11.3.0-3+deb13u3`	fixed
Debian	libvirt	bookworm	`9.0.0-4+deb12u2`	not affected
Opensuse	libvirt	tumbleweed	`10.7.0-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	libvirt	source	sid	`10.7.0-1`	not yet assigned	Not reported	[1080218]
Debian	libvirt	source	forky	`10.7.0-1`	not yet assigned	Not reported	[1080218]
Debian	libvirt	source	trixie	`10.7.0-1`	not yet assigned	Not reported	[1080218]
Debian	libvirt	source	bookworm	`Not affected`	unimportant	Not reported	[1080218]
Opensuse	libvirt	rpm	tumbleweed	`10.7.0-1.1`	Not reported	OPENSUSE-SU-2024:14315-1	Not reported

[Debian bug #1080218]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[libvirt-client]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-client-qemu]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-common]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-config-network]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-config-nwfilter]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-libxl]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-lxc]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-network]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-nodedev]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-nwfilter]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-qemu]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-secret]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-core]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-disk]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-iscsi]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-iscsi-direct]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-logical]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-mpath]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 10.7.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed

Next results

Observed: Oct 27, 2026, 2:15:20 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]