Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 20:49:32 +0000 CVE-2024-4467 — Qemu-kvm: 'qemu-img info' leads to host file read/write https://vulnerability.circl.lu/vuln/cve-2024-4467 <p><strong>Affected:</strong> qemu, Red Hat Advanced Virtualization for RHEL 8.2.1, Red Hat Advanced Virtualization for RHEL 8.4.0.EUS, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions and 9 more</p> <p>A flaw was found in the QEMU disk image utility (qemu-img) &#39;info&#39; command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.</p> <p><strong>Affected:</strong> qemu, Red Hat Advanced Virtualization for RHEL 8.2.1, Red Hat Advanced Virtualization for RHEL 8.4.0.EUS, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions and 9 more</p> <p>A flaw was found in the QEMU disk image utility (qemu-img) &#39;info&#39; command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.</p> https://vulnerability.circl.lu/vuln/cve-2024-4467