<security-notice xmlns="http://security.libvirt.org/xmlns/security-notice/1.0">
  <id>2024-0004</id>

  <summary>NULL pointer dereference when 0 length array of interfaces is requested</summary>

  <description>
<![CDATA[A refactor of the code fetching the list of interfaces for multiple
         APIs introduced a corner case on platforms where allocating 0 bytes of
         memory results in a NULL pointer. This corner case would lead to a
         NULL-pointer dereference and subsequent crash of virtinterfaced.]]>
  </description>

  <impact>
<![CDATA[Unprivileged clients can crash virtinterfaced via a read-only connection]]>
  </impact>

  <workaround>
<![CDATA[None]]>
  </workaround>

  <credits>
    <reporter>
      <name>Yanqiu Zhang</name>
      <email>yanqzhan@redhat.com</email>
    </reporter>
    <patcher>
      <name>Peter Krempa</name>
      <email>pkrempa@redhat.com</email>
    </patcher>
  </credits>

  <lifecycle>
    <reported>20240821</reported>
    <published>20240829</published>
    <fixed>20240829</fixed>
  </lifecycle>

  <reference>
    <advisory type="CVE" id="2024-8235"/>
  </reference>

  <product name="libvirt">
    <repository>libvirt.git</repository>
    <branch>
      <name>master</name>
      <tag state="vulnerable">v10.4.0</tag>
      <tag state="vulnerable">v10.5.0</tag>
      <tag state="vulnerable">v10.6.0</tag>
      <change state="vulnerable">bc596f275129bc11b2c4bcf737d380c9e8aeb72d</change>
      <tag state="fixed">v10.7.0</tag>
      <change state="fixed">8dfb12cb77996519901b8d52c754ab564ebd10e8</change>
    </branch>
  </product>

</security-notice>
