CVE-2024-2494

Summary

CVE-2024-2494: A vulnerability was discovered in the RPC library APIs of libvirt. The RPC server's deserialization code allocates memory incorrectly, leading to a crash when a negative length is passed to the g_new0 function. This issue allows a local, unprivileged user to execute a denial of service attack by causing the libvirt daemon to crash. The flaw arises from the RPC server's failure to perform a proper length check before memory allocation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.