CVE-2024-8235

A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.

• CWE-476
• CWE-476

• https://access.redhat.com/errata/RHSA-2024:9128
• https://access.redhat.com/security/cve/CVE-2024-8235Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2308680Issue Tracking, Vendor Advisory
• https://lists.libvirt.org/archives/list/devel@lists.libvirt.org/thread/X6WOVCL6QF3FQRFIIXL736RFZVSUWLWJ/Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20240920-0006/

Published

Aug 30, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-8229A vulnerability was found in Tenda O6 1.0.0.7(2054). It has …9.8
• CVE-2024-8230A vulnerability was found in Tenda O6 1.0.0.7(2054). It has …9.8
• CVE-2024-8231A vulnerability classified as critical has been found in Ten…8.8
• CVE-2024-8232SpiderControl SCADA Web Server has a vulnerability that coul…8.7
• CVE-2024-8233An issue has been discovered in GitLab CE/EE affecting all v…7.5
• CVE-2024-8234** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerab…9.8
• CVE-2024-8236The Elementor Website Builder – More than Just a Page Builde…5.4
• CVE-2024-8237A Denial of Service (DoS) issue has been discovered in GitLa…7.5
• CVE-2024-8238In version 3.22.0 of aimhubio/aim, the AimQL query language …8.1
• CVE-2024-8239The Starbox WordPress plugin before 3.5.3 does not properly…5.4
• CVE-2024-8240Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-8241The Nova Blocks by Pixelgrade plugin for WordPress is vulner…5.4