CVE-2024-6505

A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within RSS becomes controllable. Setting excessively large values may cause an index out-of-bounds issue, potentially resulting in heap overflow access. This flaw allows a privileged user in the guest to crash the QEMU process on the host.

• CWE-125

• https://access.redhat.com/security/cve/CVE-2024-6505Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2295760Issue Tracking
• https://access.redhat.com/security/cve/CVE-2024-6505Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2295760Issue Tracking
• https://security.netapp.com/advisory/ntap-20240816-0006/

Published

Jul 5, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-6498The Chatbot for WordPress by Collect.chat ⚡️ WordPress plugi…4.8
• CVE-2024-6499The WordPress Button Plugin MaxButtons plugin for WordPress …5.3
• CVE-2024-6500The InPost for WooCommerce plugin and InPost PL plugin for W…10
• CVE-2024-6501A flaw was found in NetworkManager. When a system running Ne…3.1
• CVE-2024-6502An issue was discovered in GitLab CE/EE affecting all versio…6.5
• CVE-2024-6504Rapid7 InsightVM Console versions below 6.6.260 suffer from …5.3
• CVE-2024-6506Information exposure vulnerability in the MRW plugin, in its…8.2
• CVE-2024-6507Command injection when ingesting a remote Kaggle dataset due…8.1
• CVE-2024-6508An insufficient entropy vulnerability was found in the Opens…8
• CVE-2024-6509Marinus Pfund, member of the AXIS OS Bug Bounty Program, ha…6.5
• CVE-2024-6510Local Privilege Escalation in AVG Internet Security v24 on W…7.8
• CVE-2024-6511A vulnerability classified as problematic was found in y_pro…6.1