Vulnerability record · CVE-2024-8235 · published 30 August 2024

CVE-2024-8235: Redhat libvirt null pointer dereference vulnerability

Redhat · Libvirt

A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.

6.2 CVSS 3.1 Medium EPSS 0.24% · top 86.2% CWE-476 · NULL pointer dereference

6.2CVSS 3.1 base score

0.24%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

5References

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Libvirt Redhat

References

Link	Tags
https://access.redhat.com/errata/RHSA-2024:9128
https://access.redhat.com/security/cve/CVE-2024-8235	Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2308680	Issue TrackingVendor Advisory
https://lists.libvirt.org/archives/list/[email protected]/thread/X6WOVCL6QF3FQRFIIXL736RFZVSUWLWJ/	PatchThird Party Advisory
https://security.netapp.com/advisory/ntap-20240920-0006/

Track CVE-2024-8235 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2016-5008Redhat libvirt improper access control vulnerabilitylibvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers…EPSS 3.6%13 Jul 2016 8.8CVE-2020-14339Redhat libvirt vulnerabilityA flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process. This file descriptor allows for privi…EPSS 0.42%3 Dec 2020 8.8CVE-2019-10132Redhat libvirt incorrect permission assignment vulnerabilityA vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configurati…EPSS 1.4%22 May 2019 8.5CVE-2013-4401Redhat libvirt permissions and access controls vulnerabilityThe virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the connect:read permission instead of the connect:write permi…EPSS 1.7%2 Nov 2013 8.1CVE-2017-1000256Redhat libvirt improper certificate validation vulnerabilitylibvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvirt resulting in a failure to …EPSS 1.7%31 Oct 2017 7.8CVE-2019-10166Redhat libvirt improper access control vulnerabilityIt was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDe…EPSS 0.47%2 Aug 2019 7.8CVE-2019-10167Redhat libvirt execution with unnecessary privileges vulnerabilityThe virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify …EPSS 0.52%2 Aug 2019 7.8CVE-2019-10168Redhat libvirt execution with unnecessary privileges vulnerabilityThe virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emula…EPSS 0.55%2 Aug 2019

Source: NIST National Vulnerability Database (record CVE-2024-8235), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.