MEDIUM 6.5 Go

KubeVirt NULL pointer dereference flaw

GHSA-vjhf-6xfr-5p9g · CVE-2024-31420 · GO-2024-2688

Published · Modified

Description

A NULL pointer dereference flaw was found in KubeVirt. This flaw allows an attacker who has access to a virtual machine guest on a node with DownwardMetrics enabled to cause a denial of service by issuing a high number of calls to vm-dump-metrics --virtio and then deleting the virtual machine.

Ready to move

Start Securing

Free, no credit card | First findings in minutes