Home > Vulnerability Database > CVE-2024-4467

Mend.io Vulnerability Database

CVE-2024-4467

Date: July 2, 2024

A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a "json:{}" value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.

Language: C

Severity Score

7.8

Related Resources (15)

Url: https://access.redhat.com/errata/RHSA-2024:4372

Url: https://access.redhat.com/errata/RHSA-2024:4373

Url: https://access.redhat.com/errata/RHSA-2024:4277

Url: https://access.redhat.com/errata/RHSA-2024:4420

Url: https://access.redhat.com/errata/RHSA-2024:4278

Url: https://access.redhat.com/errata/RHSA-2024:4374

Url: http://www.openwall.com/lists/oss-security/2024/07/23/2

Url: https://access.redhat.com/errata/RHSA-2024:4276

Url: https://bugzilla.redhat.com/show_bug.cgi?id=2278875

Url: https://access.redhat.com/security/cve/CVE-2024-4467

Url: https://access.redhat.com/errata/RHSA-2024:4727

Url: https://security.netapp.com/advisory/ntap-20240822-0005/

Url: https://nvd.nist.gov/vuln/detail/CVE-2024-4467

Url: https://access.redhat.com/errata/RHSA-2024:4724

Url: https://www.mend.io/vulnerability-database/CVE-2024-4467

Severity Score

7.8

Weakness Type (CWE)

Uncontrolled Resource Consumption

CWE-400

CVSS v3.1

Base Score:	7.8
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

Mend.io Vulnerability Database

We found results for “”

CVE-2024-4467

Date: July 2, 2024

Language: C

Severity Score

Related Resources (15)

Severity Score

Weakness Type (CWE)

CVSS v3.1

Do you need more information?