A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.
References
Configurations
No configuration.
History
13 Sep 2024, 22:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
23 Jul 2024, 16:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
23 Jul 2024, 15:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
09 Jul 2024, 17:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
08 Jul 2024, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Summary |
|
03 Jul 2024, 00:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
02 Jul 2024, 16:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-07-02 16:15
Updated : 2024-09-13 22:15
NVD link : CVE-2024-4467
Mitre link : CVE-2024-4467
CVE.ORG link : CVE-2024-4467
JSON object : View
Products Affected
No product.
CWE
CWE-400
Uncontrolled Resource Consumption