Is CVE-2024-8235 in the CISA KEV catalog?

No. CVE-2024-8235 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2024-8235?

CVE-2024-8235 has a CVSS v3 base score of 6.2 (MEDIUM).

What is the EPSS score for CVE-2024-8235?

CVE-2024-8235 has an EPSS score of 0.24% (15th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2024-8235?

Upgrade libvirt on debian 13 to 10.7.0-1 or later. Fixes are available for 119 affected products.

CVE & CISA-KEV Catalog

CVE-2024-8235

MEDIUM

6.2

CVSS v3

NVD

Description

A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.

CWE-476NULL Pointer Dereference

How to fix

Remediation Available

libvirtDebian

Fixed in:10.7.0-1CVE-2024-8235

libvirtRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirtRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-clientRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-clientRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-client-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-client-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-client-qemuRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-client-qemuRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemonRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemonRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-commonRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-commonRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-common-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-common-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-config-networkRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-config-networkRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-config-nwfilterRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-config-nwfilterRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-interfaceRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-interfaceRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-interface-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-interface-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-networkRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-networkRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-network-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-network-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-nodedevRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-nodedevRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-nodedev-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-nodedev-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-nwfilterRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-nwfilterRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-nwfilter-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-nwfilter-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-qemuRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-qemuRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-qemu-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-qemu-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-secretRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-secretRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-secret-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-secret-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storageRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storageRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-coreRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-coreRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-core-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-core-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-diskRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-diskRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-disk-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-disk-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-iscsiRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-iscsiRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-iscsi-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-iscsi-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-logicalRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-logicalRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-logical-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-logical-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-mpathRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-mpathRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-mpath-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-mpath-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-rbdRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-rbdRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-rbd-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-rbd-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-scsiRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-scsiRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-scsi-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-driver-storage-scsi-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-kvmRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-kvmRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-lockRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-lockRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-lock-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-lock-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-logRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-logRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-log-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-log-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-plugin-lockdRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-plugin-lockdRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-plugin-lockd-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-plugin-lockd-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-plugin-sanlockRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-plugin-sanlockRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-plugin-sanlock-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-plugin-sanlock-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-proxyRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-proxyRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-proxy-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-daemon-proxy-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-debugsourceRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-debugsourceRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-develRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-develRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-docsRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-docsRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-libsRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-libsRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-libs-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-libs-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-nssRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-nssRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-nss-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-nss-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-ssh-proxyRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-ssh-proxyRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-ssh-proxy-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-ssh-proxy-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-wireshark-debuginfoRocky

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

libvirt-wireshark-debuginfoRed Hat / RHEL

Fixed in:0:10.5.0-7.el9_5RHSA-2024:9128

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityNone

IntegrityNone

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploit Intelligence

0.24%probability of exploitation in 30 days

15thpercentile

Low risk: more likely to be exploited than 15% of all known CVEs.

References

Patch1

lists.libvirt.org

Vendor Advisory2

Other references2

Related Vulnerabilities

Other CWE-476 (NULL Pointer Dereference) vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2023-21758	High	7.5	92%	-	Fix
CVE-2023-21547	High	7.5	88%	-	Fix
CVE-2014-3470	Medium	4.3	86%	-	Fix
CVE-2021-44224	High	8.2	82%	-	Fix
CVE-2016-0742	High	7.5	82%	-	Fix
CVE-2009-1386	Medium	5.0	80%	-	Fix

Embed a live status badge for CVE-2024-8235

Markdown

[![CVE-2024-8235](https://tridentstack.com/cve/badge/CVE-2024-8235.svg)](https://tridentstack.com/cve/CVE-2024-8235)

HTML

<a href="https://tridentstack.com/cve/CVE-2024-8235"><img src="https://tridentstack.com/cve/badge/CVE-2024-8235.svg" alt="CVE-2024-8235"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.