MEDIUM 6.5 Go
KubeVirt NULL pointer dereference flaw
GHSA-vjhf-6xfr-5p9g · CVE-2024-31420 · GO-2024-2688
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
A NULL pointer dereference flaw was found in KubeVirt. This flaw allows an attacker who has access to a virtual machine guest on a node with DownwardMetrics enabled to cause a denial of service by issuing a high number of calls to vm-dump-metrics --virtio and then deleting the virtual machine.
Ready to move
Start Securing
Free, no credit card | First findings in minutes