Is CVE-2024-1441 in the CISA KEV catalog?

No. CVE-2024-1441 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2024-1441?

CVE-2024-1441 has a CVSS v3 base score of 5.5 (MEDIUM).

What is the EPSS score for CVE-2024-1441?

CVE-2024-1441 has an EPSS score of 0.40% (32th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2024-1441?

Upgrade libvirt on debian 11 to 7.0.0-3+deb11u3 or later. Fixes are available for 119 affected products.

CVE & CISA-KEV Catalog

CVE-2024-1441

MEDIUM

5.5

CVSS v3

NVD

Description

An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.

CWE-193

How to fix

Remediation Available

libvirtDebian

Fixed in:7.0.0-3+deb11u3CVE-2024-1441

Fixed in:9.0.0-4+deb12u1CVE-2024-1441

Fixed in:10.1.0-1CVE-2024-1441

libvirtRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirtRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-clientRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-clientRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-client-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-client-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-client-qemuRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-client-qemuRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemonRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemonRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-commonRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-commonRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-common-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-common-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-config-networkRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-config-networkRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-config-nwfilterRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-config-nwfilterRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-interfaceRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-interfaceRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-interface-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-interface-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-networkRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-networkRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-network-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-network-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-nodedevRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-nodedevRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-nodedev-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-nodedev-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-nwfilterRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-nwfilterRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-nwfilter-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-nwfilter-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-qemuRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-qemuRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-qemu-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-qemu-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-secretRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-secretRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-secret-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-secret-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storageRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storageRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-coreRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-coreRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-core-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-core-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-diskRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-diskRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-disk-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-disk-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-iscsiRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-iscsiRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-iscsi-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-iscsi-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-logicalRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-logicalRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-logical-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-logical-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-mpathRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-mpathRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-mpath-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-mpath-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-rbdRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-rbdRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-rbd-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-rbd-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-scsiRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-scsiRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-scsi-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-driver-storage-scsi-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-kvmRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-kvmRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-lockRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-lockRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-lock-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-lock-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-logRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-logRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-log-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-log-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-plugin-lockdRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-plugin-lockdRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-plugin-lockd-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-plugin-lockd-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-plugin-sanlockRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-plugin-sanlockRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-plugin-sanlock-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-plugin-sanlock-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-proxyRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-proxyRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-proxy-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-daemon-proxy-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-debugsourceRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-debugsourceRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-develRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-develRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-docsRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-docsRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-libsRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-libsRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-libs-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-libs-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-nssRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-nssRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-nss-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-nss-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-wireshark-debuginfoRocky

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirt-wireshark-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.2.el9_4RHSA-2024:2560

libvirtUbuntu

Fixed in:6.0.0-0ubuntu8.19USN-6734-1

Fixed in:8.0.0-1ubuntu7.10USN-6734-1

Fixed in:9.6.0-1ubuntu1.1USN-6734-1

Fixed in:10.0.0-2ubuntu8.1USN-6734-2

libvirt-daemonUbuntu

Fixed in:6.0.0-0ubuntu8.19USN-6734-1

Fixed in:8.0.0-1ubuntu7.10USN-6734-1

Fixed in:9.6.0-1ubuntu1.1USN-6734-1

Fixed in:10.0.0-2ubuntu8.1USN-6734-2

libvirt-daemon-systemUbuntu

Fixed in:6.0.0-0ubuntu8.19USN-6734-1

Fixed in:8.0.0-1ubuntu7.10USN-6734-1

Fixed in:9.6.0-1ubuntu1.1USN-6734-1

Fixed in:10.0.0-2ubuntu8.1USN-6734-2

libvirt0Ubuntu

Fixed in:6.0.0-0ubuntu8.19USN-6734-1

Fixed in:8.0.0-1ubuntu7.10USN-6734-1

Fixed in:9.6.0-1ubuntu1.1USN-6734-1

Fixed in:10.0.0-2ubuntu8.1USN-6734-2

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredLow

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityNone

IntegrityNone

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploit Intelligence

0.40%probability of exploitation in 30 days

32ndpercentile

Low risk: more likely to be exploited than 32% of all known CVEs.

References

Other references7

Related Vulnerabilities

Other CWE-193 vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2021-3156	High	7.8	99%	KEV	Fix
CVE-2003-0466	Critical	9.8	78%	-	-
CVE-2023-44444	High	7.8	56%	-	Fix
CVE-2021-23017	High	7.7	53%	-	Fix
CVE-2023-28709	High	7.5	52%	-	Fix
CVE-2018-8828	Critical	9.8	31%	-	Fix

Embed a live status badge for CVE-2024-1441

Markdown

[![CVE-2024-1441](https://tridentstack.com/cve/badge/CVE-2024-1441.svg)](https://tridentstack.com/cve/CVE-2024-1441)

HTML

<a href="https://tridentstack.com/cve/CVE-2024-1441"><img src="https://tridentstack.com/cve/badge/CVE-2024-1441.svg" alt="CVE-2024-1441"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-04-11.