AZL-60091
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-60091.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-60091
- Upstream
- Published
- 2024-07-02T16:15:05Z
- Modified
- 2026-04-01T05:19:35.535271Z
- Summary
- CVE-2024-4467 affecting package qemu for versions less than 6.2.0-24
- Details
-
A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a
json:{}value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file. - References