MEDIUM 6.5 Go
KubeVirt NULL pointer dereference flaw
GHSA-vjhf-6xfr-5p9g · CVE-2024-31420 · GO-2024-2688
Published · Modified
Description
A NULL pointer dereference flaw was found in KubeVirt. This flaw allows an attacker who has access to a virtual machine guest on a node with DownwardMetrics enabled to cause a denial of service by issuing a high number of calls to vm-dump-metrics --virtio and then deleting the virtual machine.
Ready to move
Start Securing
Free, no credit card | First findings in minutes