CVE-2024-4467 — Qemu-kvm: 'qemu-img info' leads to host file read/write

Description (CNA)

A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.

Affected (CNA)

Vendor / product	Versions
Not supplied / Not supplied	affected 4.0.0 before 9.1.0
Red Hat / Advanced Virtualization for RHEL 8.2.1	unaffected 8020120240708124623.863bb0db before *
Red Hat / Advanced Virtualization for RHEL 8.4.0.EUS	unaffected 8040020240708093550.522a0ee4 before *
Red Hat / Advanced Virtualization for RHEL 8.4.0.EUS	unaffected 8040020240708093550.522a0ee4 before *
Red Hat / Red Hat Enterprise Linux 8	unaffected 8100020240704072441.489197e6 before *
Red Hat / Red Hat Enterprise Linux 8	unaffected 8100020240704072441.489197e6 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	unaffected 8040020240703100448.522a0ee4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Telecommunications Update Service	unaffected 8040020240703100448.522a0ee4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	unaffected 8040020240703100448.522a0ee4 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	unaffected 8060020240703092415.ad008a3a before *
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service	unaffected 8060020240703092415.ad008a3a before *
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	unaffected 8060020240703092415.ad008a3a before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Support	unaffected 8080020240703085245.63b34585 before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Support	unaffected 8080020240703085245.63b34585 before *
Red Hat / Red Hat Enterprise Linux 9	unaffected 17:8.2.0-11.el9_4.4 before *
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	unaffected 17:6.2.0-11.el9_0.9 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Support	unaffected 17:7.2.0-14.el9_2.11 before *
Red Hat / Red Hat Enterprise Linux 10	unaffected
Red Hat / Red Hat Enterprise Linux 6	unaffected
Red Hat / Red Hat Enterprise Linux 7	unaffected
Red Hat / Red Hat Enterprise Linux 7	unaffected
Red Hat / Red Hat Enterprise Linux 8 Advanced Virtualization	affected
Red Hat / Red Hat OpenShift Virtualization 4	affected

CWE

CWE-787

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.