Skip to main content

NULL Pointer Dereference

CVE-2024-31420

Medium
6.5/10

Summary

A NULL pointer dereference flaw was found in KubeVirt. This flaw allows an attacker who has access to a virtual machine guest on a node with "DownwardMetrics" enabled to cause a Denial-of-Service (DoS) attack by issuing a high number of calls to "vm-dump-metrics" "--virtio" and then deleting the virtual machine.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • NONE
  • HIGH

CWE-476 - NULL Pointer Dereference

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

Advisory Timeline

  • Published