CVE-2024-1441
MEDIUMRed Hat Enterprise Linux 9 - Denial of Service via udevListInterfacesByStatus Off-by-One Error
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-1441. PoCs published by almkuznetsov.
AI-analyzed exploit summary This repository provides a detailed technical walkthrough of the fuzzing and analysis process used to discover CVE-2024-1441. It includes step-by-step instructions for setting up the environment, building the target software (libvirt) with AFL++ instrumentation, running fuzzing, and analyzing crashes using CASR.
Description
An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.
Exploits (1)
This repository provides a detailed technical walkthrough of the fuzzing and analysis process used to discover CVE-2024-1441. It includes step-by-step instructions for setting up the environment, building the target software (libvirt) with AFL++ instrumentation, running fuzzing, and analyzing crashes using CASR.
References (7)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H