qemu-virtiofsd vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the qemu-virtiofsd package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Use After Free	<15:7.2.0-33.module+el8.10.0+90773+23b749d4
M Reachable Assertion	<15:7.2.0-33.module+el8.10.0+90773+23b749d4
M CVE-2024-7409	<15:7.2.0-16.module+el8.10.0+90413+d8f5961d
H Out-of-bounds Read	<15:6.1.1-9.module+el8.10.0+90374+95a91213
H Out-of-bounds Write	<15:7.2.0-15.module+el8.10.0+90377+6a12a345
H Out-of-bounds Write	<15:6.1.1-9.module+el8.10.0+90374+95a91213
H NULL Pointer Dereference	<15:6.1.1-9.module+el8.10.0+90374+95a91213
H Reachable Assertion	<15:6.1.1-9.module+el8.10.0+90374+95a91213
H Out-of-bounds Write	<15:6.1.1-9.module+el8.10.0+90374+95a91213
H Out-of-bounds Write	<15:7.2.0-15.module+el8.10.0+90377+6a12a345
H Execution with Unnecessary Privileges	<15:6.1.1-9.module+el8.10.0+90374+95a91213
H Return of Stack Variable Address	<15:7.2.0-15.module+el8.10.0+90377+6a12a345
H Double Free	<15:6.1.1-9.module+el8.10.0+90374+95a91213
H CVE-2024-3447	<15:6.1.1-9.module+el8.10.0+90374+95a91213
M Use After Free	<15:7.2.0-11.module+el8.9.0+90173+a3f3e83a
M Use After Free	<15:7.2.0-11.module+el8.9.0+90173+a3f3e83a
M CVE-2024-24474	<15:7.2.0-11.module+el8.9.0+90173+a3f3e83a
M Out-of-bounds Write	<15:7.2.0-11.module+el8.9.0+90173+a3f3e83a
M CVE-2024-1441	<15:7.2.0-11.module+el8.9.0+90173+a3f3e83a
M NULL Pointer Dereference	<15:7.2.0-11.module+el8.9.0+90173+a3f3e83a
M Improper Synchronization	<15:7.2.0-11.module+el8.9.0+90173+a3f3e83a
M Divide By Zero	<15:7.2.0-11.module+el8.9.0+90173+a3f3e83a
H Loop with Unreachable Exit Condition ('Infinite Loop')	<15:7.2.0-5.module+el8.8.0+21147+1292344f
H Improper Locking	<15:7.2.0-5.module+el8.8.0+21147+1292344f
H Out-of-bounds Write	<15:7.2.0-5.module+el8.8.0+21147+1292344f
H Race Condition	<15:7.2.0-5.module+el8.8.0+21147+1292344f
H Out-of-bounds Write	<15:7.2.0-5.module+el8.8.0+21147+1292344f
H NULL Pointer Dereference	<15:7.2.0-5.module+el8.8.0+21147+1292344f
H Memory Leak	<15:6.1.1-8.module+el8.8.0+21161+70fb2747
H Allocation of Resources Without Limits or Throttling	<15:6.1.1-6.module+el8.7.0+21035+a8208c98
H Use After Free	<15:6.1.1-5.module+el8.7.0+20916+50473d5a
H Integer Underflow	<15:6.1.1-5.module+el8.7.0+20916+50473d5a
H Buffer Overflow	<15:6.1.1-5.module+el8.7.0+20916+50473d5a
H Out-of-bounds Read	<15:6.1.1-5.module+el8.7.0+20916+50473d5a
H Use After Free	<15:6.1.1-4.module+el8.6.0+20842+e9607200
H Buffer Overflow	<15:6.1.1-4.module+el8.6.0+20842+e9607200
H Buffer Overflow	<15:6.1.1-4.module+el8.6.0+20842+e9607200
H Missing Release of Resource after Effective Lifetime	<15:6.1.1-4.module+el8.6.0+20842+e9607200

Vulnerability

Vulnerable Version

Use After Free

<15:7.2.0-33.module+el8.10.0+90773+23b749d4