CVE-2024-4467

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-4467
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-4467.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-4467
Downstream
AZL (2)
BELL (1)
DEBIAN (1)
MGASA (1)
OESA (1)
openSUSE (1)
RHSA (9)
RLSA (1)
SUSE (5)
UBUNTU (1)
Related
ALSA (2)
openSUSE (1)
SUSE (5)
Published
2024-07-02T15:57:23Z
Modified
2026-10-22T10:32:51Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Qemu-kvm: 'qemu-img info' leads to host file read/write
Details

A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a json:{} value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.

Database specific 
{
    "cna_assigner": "redhat",
    "cwe_ids": [
        "CWE-787"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/4xxx/CVE-2024-4467.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "8020120240708124623.863bb0db"
                        },
                        {
                            "fixed": "8040020240708093550.522a0ee4"
                        },
                        {
                            "fixed": "8040020240708093550.522a0ee4"
                        },
                        {
                            "fixed": "8100020240704072441.489197e6"
                        },
                        {
                            "fixed": "8100020240704072441.489197e6"
                        },
                        {
                            "fixed": "8040020240703100448.522a0ee4"
                        },
                        {
                            "fixed": "8040020240703100448.522a0ee4"
                        },
                        {
                            "fixed": "8040020240703100448.522a0ee4"
                        },
                        {
                            "fixed": "8060020240703092415.ad008a3a"
                        },
                        {
                            "fixed": "8060020240703092415.ad008a3a"
                        },
                        {
                            "fixed": "8060020240703092415.ad008a3a"
                        },
                        {
                            "fixed": "8080020240703085245.63b34585"
                        },
                        {
                            "fixed": "8080020240703085245.63b34585"
                        },
                        {
                            "fixed": "17:8.2.0-11.el9_4.4"
                        },
                        {
                            "fixed": "17:6.2.0-11.el9_0.9"
                        },
                        {
                            "fixed": "17:7.2.0-14.el9_2.11"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "InverseAffectedRanges"
                }
            ]
        }
    ]
}
References

Affected packages

Git / gitlab.com/qemu-project/qemu

Affected ranges

Type
GIT
Repo
https://gitlab.com/qemu-project/qemu
Events
Introduced
131b9a05705636086699df15d4a6d328bb2585e8
Fixed
fd1952d814da738ed107e05583b3e02ac11e88ff
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "4.0.0"
                },
                {
                    "fixed": "9.1.0"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        }
    ]
}

Affected versions

v4.*
v4.0.0
v4.1.0
v4.1.0-rc0
v4.1.0-rc1
v4.1.0-rc2
v4.1.0-rc3
v4.1.0-rc4
v4.1.0-rc5
v4.2.0
v4.2.0-rc0
v4.2.0-rc1
v4.2.0-rc2
v4.2.0-rc3
v4.2.0-rc4
v4.2.0-rc5
v5.*
v5.0.0
v5.0.0-rc0
v5.0.0-rc1
v5.0.0-rc2
v5.0.0-rc3
v5.0.0-rc4
v5.1.0
v5.1.0-rc0
v5.1.0-rc1
v5.1.0-rc2
v5.1.0-rc3
v5.2.0
v5.2.0-rc0
v5.2.0-rc1
v5.2.0-rc2
v5.2.0-rc3
v5.2.0-rc4
v6.*
v6.0.0
v6.0.0-rc0
v6.0.0-rc1
v6.0.0-rc2
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.1.0
v6.1.0-rc0
v6.1.0-rc1
v6.1.0-rc2
v6.1.0-rc3
v6.1.0-rc4
v6.2.0
v6.2.0-rc0
v6.2.0-rc1
v6.2.0-rc3
v6.2.0-rc4
v7.*
v7.0.0
v7.0.0-rc0
v7.0.0-rc1
v7.0.0-rc2
v7.0.0-rc3
v7.0.0-rc4
v7.1.0
v7.1.0-rc0
v7.1.0-rc1
v7.1.0-rc2
v7.1.0-rc3
v7.1.0-rc4
v7.2.0
v7.2.0-rc0
v7.2.0-rc1
v7.2.0-rc2
v7.2.0-rc3
v7.2.0-rc4
v8.*
v8.0.0
v8.0.0-rc0
v8.0.0-rc1
v8.0.0-rc2
v8.0.0-rc3
v8.0.0-rc4
v8.1.0
v8.1.0-rc0
v8.1.0-rc1
v8.1.0-rc2
v8.1.0-rc3
v8.1.0-rc4
v8.2.0
v8.2.0-rc0
v8.2.0-rc1
v8.2.0-rc2
v8.2.0-rc3
v8.2.0-rc4
v9.*
v9.0.0
v9.0.0-rc0
v9.0.0-rc1
v9.0.0-rc2
v9.0.0-rc3
v9.0.0-rc4
v9.1.0-rc0
v9.1.0-rc1
v9.1.0-rc2
v9.1.0-rc3
v9.1.0-rc4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-4467.json"