CVE-2024-24474

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-24474
QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len.
CVSS

No CVSS.

References
Link Resource
https://gist.github.com/1047524396/5ce07b9d387095c276b1cd234ae5615e Third Party Advisory
https://gist.github.com/1047524396/5ce07b9d387095c276b1cd234ae5615e Third Party Advisory
https://github.com/qemu/qemu/commit/77668e4b9bca03a856c27ba899a2513ddf52bb52 Patch
https://github.com/qemu/qemu/commit/77668e4b9bca03a856c27ba899a2513ddf52bb52 Patch
https://gitlab.com/qemu-project/qemu/-/issues/1810 Exploit Issue Tracking Vendor Advisory
https://gitlab.com/qemu-project/qemu/-/issues/1810 Exploit Issue Tracking Vendor Advisory
https://security.netapp.com/advisory/ntap-20240510-0012/ Third Party Advisory
https://security.netapp.com/advisory/ntap-20240510-0012/ Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:qemu:qemu:*:-:*:*:*:*:*:*
History

25 Jun 2025, 19:29

Type Values Removed Values Added
References () https://gitlab.com/qemu-project/qemu/-/issues/1810 - () https://gitlab.com/qemu-project/qemu/-/issues/1810 - Exploit, Issue Tracking, Vendor Advisory
References () https://security.netapp.com/advisory/ntap-20240510-0012/ - () https://security.netapp.com/advisory/ntap-20240510-0012/ - Third Party Advisory
References () https://gist.github.com/1047524396/5ce07b9d387095c276b1cd234ae5615e - () https://gist.github.com/1047524396/5ce07b9d387095c276b1cd234ae5615e - Third Party Advisory
References () https://github.com/qemu/qemu/commit/77668e4b9bca03a856c27ba899a2513ddf52bb52 - () https://github.com/qemu/qemu/commit/77668e4b9bca03a856c27ba899a2513ddf52bb52 - Patch
CPE cpe:2.3:a:qemu:qemu:*:-:*:*:*:*:*:*
First Time Qemu qemu
Qemu

10 Jun 2024, 16:15

Type Values Removed Values Added
References
  • () https://security.netapp.com/advisory/ntap-20240510-0012/ -

21 Feb 2024, 01:15

Type Values Removed Values Added
Summary Buffer Overflow vulnerability in Qemu before v.8.2.0 allows a remote attacker to execute arbitrary code via the async_len variable to the FIFO buffer component. QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len.

20 Feb 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-20 18:15

Updated : 2025-06-25 19:29

NVD link : CVE-2024-24474

Mitre link : CVE-2024-24474

JSON object : View

Products Affected

qemu

  • qemu
CWE

No CWE.