Riskcovery

CVE-2024-4467

Qemu-kvm: 'qemu-img info' leads to host file read/write

State
Published
Severity
7.8 High
Published
Jul 2, 2024
Updated
Feb 25, 2026
Reserved
May 3, 2024

Read the record on cve.org

Description

A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hredhat

Weaknesses

Affected Products

ProductVersions
qemu
  • 4.0.0 to before 9.1.0Affected
Advanced Virtualization for RHEL 8.2.1Red Hat
  • 8020120240708124623.863bb0db and laterNot affected
Advanced Virtualization for RHEL 8.4.0.EUSRed Hat
  • 8040020240708093550.522a0ee4 and laterNot affected
Advanced Virtualization for RHEL 8.4.0.EUSRed Hat
  • 8040020240708093550.522a0ee4 and laterNot affected
Red Hat Enterprise Linux 8Red Hat
  • 8100020240704072441.489197e6 and laterNot affected
Red Hat Enterprise Linux 8Red Hat
  • 8100020240704072441.489197e6 and laterNot affected
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat
  • 8040020240703100448.522a0ee4 and laterNot affected
Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceRed Hat
  • 8040020240703100448.522a0ee4 and laterNot affected
Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsRed Hat
  • 8040020240703100448.522a0ee4 and laterNot affected
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRed Hat
  • 8060020240703092415.ad008a3a and laterNot affected
Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceRed Hat
  • 8060020240703092415.ad008a3a and laterNot affected
Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsRed Hat
  • 8060020240703092415.ad008a3a and laterNot affected
Red Hat Enterprise Linux 8.8 Extended Update SupportRed Hat
  • 8080020240703085245.63b34585 and laterNot affected
Red Hat Enterprise Linux 8.8 Extended Update SupportRed Hat
  • 8080020240703085245.63b34585 and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 17:8.2.0-11.el9_4.4 and laterNot affected
Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsRed Hat
  • 17:6.2.0-11.el9_0.9 and laterNot affected
Red Hat Enterprise Linux 9.2 Extended Update SupportRed Hat
  • 17:7.2.0-14.el9_2.11 and laterNot affected
Red Hat Enterprise Linux 10Red Hat
    Red Hat Enterprise Linux 6Red Hat
      Red Hat Enterprise Linux 7Red Hat
        Red Hat Enterprise Linux 7Red Hat
          Red Hat Enterprise Linux 8 Advanced VirtualizationRed Hat
            Red Hat OpenShift Virtualization 4Red Hat

              References

              Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.