CVE-2024-2494: libvirt

CVSS: 6.2v3.1MediumDeferred

AliasesMGASA-2024-0114SUSE-SU-2024:1078-1SUSE-SU-2024:1083-1+5 more

Published 21-03-2024Last modified 25-02-2026

Vulnerability summary

CVE-2024-2494 is a medium (CVSS 6.2) vulnerability in libvirt. EPSS estimates a 0.37% chance of exploitation in the next 30 days, higher than 29% of scored vulnerabilities.

Overall risk

25/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.2/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.37%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6 · Related 4

DLA-3778-1 RHSA-2024:2560 SUSE-SU-2024:1099-1 USN-6734-1 USN-6734-2 USN-8652-1

Timeline

21-03-2024
PublishedVulnerability first disclosed.
25-02-2026
Last modifiedVulnerability information updated.

Description

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a crash due to the negative length being treated as a huge positive number. This flaw allows a local, unprivileged user to perform a denial of service attack by causing the libvirt daemon to crash.

CVSS metrics

5 scores · 5 sources · 1 version

v3.16.2

EPSS trend

Probability

0.37%

Chance of exploitation in the next 30 days

Percentile

29%

Versus all other CVEs

30-day change

0.00 pp

From 0.37% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.37%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-789Memory Allocation with Excessive Size ValueThe product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

Affected systems

Redhat194 products

hivex< 0:1.3.18-23.module+el8.9.0+18724+20190c23
hivex-debuginfo< 0:1.3.18-23.module+el8.9.0+18724+20190c23
hivex-debugsource< 0:1.3.18-23.module+el8.9.0+18724+20190c23
hivex-devel< 0:1.3.18-23.module+el8.9.0+18724+20190c23
libguestfs< 1:1.44.0-9.module+el8.9.0+18724+20190c23

libguestfs-appliance< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-bash-completion< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-debuginfo< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-debugsource< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-devel< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-gfs2< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-gobject< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-gobject-debuginfo< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-gobject-devel< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-inspect-icons< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-java< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-java-debuginfo< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-java-devel< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-javadoc< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-man-pages-ja< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-man-pages-uk< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-rescue< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-rsync< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-tools< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-tools-c< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-tools-c-debuginfo< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-winsupport< 0:8.10-1.module+el8.10.0+19908+9938c7c9
libguestfs-xfs< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libiscsi< 0:1.18.0-8.module+el8.9.0+18724+20190c23
libiscsi-debuginfo< 0:1.18.0-8.module+el8.9.0+18724+20190c23
libiscsi-debugsource< 0:1.18.0-8.module+el8.9.0+18724+20190c23
libiscsi-devel< 0:1.18.0-8.module+el8.9.0+18724+20190c23
libiscsi-utils< 0:1.18.0-8.module+el8.9.0+18724+20190c23
libiscsi-utils-debuginfo< 0:1.18.0-8.module+el8.9.0+18724+20190c23
libnbd< 0:1.6.0-5.module+el8.9.0+18724+20190c23
libnbd-bash-completion< 0:1.6.0-5.module+el8.9.0+18724+20190c23
libnbd-debuginfo< 0:1.6.0-5.module+el8.9.0+18724+20190c23
libnbd-debugsource< 0:1.6.0-5.module+el8.9.0+18724+20190c23
libnbd-devel< 0:1.6.0-5.module+el8.9.0+18724+20190c23
libtpms< 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.9.0+18724+20190c23
libtpms-debuginfo< 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.9.0+18724+20190c23
libtpms-debugsource< 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.9.0+18724+20190c23
libtpms-devel< 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.9.0+18724+20190c23
libvirt< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-client< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-client-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-config-network< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-config-nwfilter< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-interface< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-interface-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-network< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-network-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-nodedev< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-nodedev-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-nwfilter< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-nwfilter-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-qemu< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-qemu-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-secret< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-secret-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-core< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-core-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-disk< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-disk-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-gluster< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-gluster-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-iscsi< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-iscsi-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-iscsi-direct< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-iscsi-direct-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-logical< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-logical-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-mpath< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-mpath-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-rbd< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-rbd-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-scsi< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-driver-storage-scsi-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-daemon-kvm< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-dbus< 0:1.3.0-2.module+el8.9.0+18724+20190c23
libvirt-dbus-debuginfo< 0:1.3.0-2.module+el8.9.0+18724+20190c23
libvirt-dbus-debugsource< 0:1.3.0-2.module+el8.9.0+18724+20190c23
libvirt-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-debugsource< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-devel< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-docs< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-libs< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-libs-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-lock-sanlock< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-lock-sanlock-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-nss< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-nss-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-python< 0:8.0.0-2.module+el8.9.0+18724+20190c23
libvirt-python-debugsource< 0:8.0.0-2.module+el8.9.0+18724+20190c23
libvirt-wireshark< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
libvirt-wireshark-debuginfo< 0:8.0.0-23.1.module+el8.10.0+21659+98b2ad6a
lua-guestfs< 1:1.44.0-9.module+el8.9.0+18724+20190c23
lua-guestfs-debuginfo< 1:1.44.0-9.module+el8.9.0+18724+20190c23
nbdfuse< 0:1.6.0-5.module+el8.9.0+18724+20190c23
nbdfuse-debuginfo< 0:1.6.0-5.module+el8.9.0+18724+20190c23
nbdkit< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-bash-completion< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-basic-filters< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-basic-filters-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-basic-plugins< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-basic-plugins-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-curl-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-curl-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-debugsource< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-devel< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-example-plugins< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-example-plugins-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-gzip-filter< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-gzip-filter-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-gzip-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-gzip-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-linuxdisk-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-linuxdisk-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-nbd-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-nbd-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-python-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-python-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-server< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-server-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-ssh-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-ssh-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-tar-filter< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-tar-filter-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-tar-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-tar-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-tmpdisk-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-tmpdisk-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-vddk-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-vddk-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-xz-filter< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-xz-filter-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
netcf< 0:0.2.8-12.module+el8.9.0+18724+20190c23
netcf-debuginfo< 0:0.2.8-12.module+el8.9.0+18724+20190c23
netcf-debugsource< 0:0.2.8-12.module+el8.9.0+18724+20190c23
netcf-devel< 0:0.2.8-12.module+el8.9.0+18724+20190c23
netcf-libs< 0:0.2.8-12.module+el8.9.0+18724+20190c23
netcf-libs-debuginfo< 0:0.2.8-12.module+el8.9.0+18724+20190c23
ocaml-hivex< 0:1.3.18-23.module+el8.9.0+18724+20190c23
ocaml-hivex-debuginfo< 0:1.3.18-23.module+el8.9.0+18724+20190c23
ocaml-hivex-devel< 0:1.3.18-23.module+el8.9.0+18724+20190c23
ocaml-libguestfs< 1:1.44.0-9.module+el8.9.0+18724+20190c23
ocaml-libguestfs-debuginfo< 1:1.44.0-9.module+el8.9.0+18724+20190c23
ocaml-libguestfs-devel< 1:1.44.0-9.module+el8.9.0+18724+20190c23
ocaml-libnbd< 0:1.6.0-5.module+el8.9.0+18724+20190c23
ocaml-libnbd-debuginfo< 0:1.6.0-5.module+el8.9.0+18724+20190c23
ocaml-libnbd-devel< 0:1.6.0-5.module+el8.9.0+18724+20190c23
perl-hivex< 0:1.3.18-23.module+el8.9.0+18724+20190c23
perl-hivex-debuginfo< 0:1.3.18-23.module+el8.9.0+18724+20190c23
perl-Sys-Guestfs< 1:1.44.0-9.module+el8.9.0+18724+20190c23
perl-Sys-Guestfs-debuginfo< 1:1.44.0-9.module+el8.9.0+18724+20190c23
perl-Sys-Virt< 0:8.0.0-1.module+el8.9.0+18724+20190c23
perl-Sys-Virt-debuginfo< 0:8.0.0-1.module+el8.9.0+18724+20190c23
perl-Sys-Virt-debugsource< 0:8.0.0-1.module+el8.9.0+18724+20190c23
python3-hivex< 0:1.3.18-23.module+el8.9.0+18724+20190c23
python3-hivex-debuginfo< 0:1.3.18-23.module+el8.9.0+18724+20190c23
python3-libguestfs< 1:1.44.0-9.module+el8.9.0+18724+20190c23
python3-libguestfs-debuginfo< 1:1.44.0-9.module+el8.9.0+18724+20190c23
python3-libnbd< 0:1.6.0-5.module+el8.9.0+18724+20190c23
python3-libnbd-debuginfo< 0:1.6.0-5.module+el8.9.0+18724+20190c23
python3-libvirt< 0:8.0.0-2.module+el8.9.0+18724+20190c23
python3-libvirt-debuginfo< 0:8.0.0-2.module+el8.9.0+18724+20190c23
qemu-guest-agent< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-guest-agent-debuginfo< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-img< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-img-debuginfo< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-block-curl< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-block-curl-debuginfo< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-block-gluster< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-block-gluster-debuginfo< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-block-iscsi< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-block-iscsi-debuginfo< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-block-rbd< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-block-rbd-debuginfo< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-block-ssh< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-block-ssh-debuginfo< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-common< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-common-debuginfo< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-core< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-core-debuginfo< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-debuginfo< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-debugsource< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-docs< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-hw-usbredir< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6
qemu-kvm-hw-usbredir-debuginfo< 15:6.2.0-49.module+el8.10.0+21533+3df3c4b6

Show all 194

Opensuse3 products

libvirt&distro=openSUSE Leap Micro 5.3< 8.0.0-150400.7.11.2
libvirt&distro=openSUSE Leap Micro 5.4< 8.0.0-150400.7.11.2
libvirt&distro=openSUSE Tumbleweed< 10.1.0-2.1

Debian1 product

libvirt< 9.0.0-4+deb12u1 | < 10.2.0-1

Mageia1 product

libvirt< 9.6.0-1.1.mga9

Ubuntu1 product

libvirt< 1.2.2-0ubuntu13.1.28+esm2 | < 1.3.1-1ubuntu10.31+esm1 | < 4.0.0-1ubuntu8.21+esm1 | < 6.0.0-0ubuntu8.19 | < 8.0.0-1ubuntu7.10 | < 10.0.0-2ubuntu8.1

5 vendors · 200 products · Showing 200 of 250. Use Open JSON for the complete list.