A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.
CVSS
No CVSS.
References
Configurations
No configuration.
History
13 Sep 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
23 Jul 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
23 Jul 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 Jul 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
08 Jul 2024, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
03 Jul 2024, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
02 Jul 2024, 17:44
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-02 16:15
Updated : 2024-09-13 22:15
NVD link : CVE-2024-4467
Mitre link : CVE-2024-4467
JSON object : View
Products Affected
No product.
CWE
CWE-400
Uncontrolled Resource Consumption