Vulnerability Details : CVE-2024-4467

A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.
Published 2024-07-02 16:15:05
Updated 2024-09-13 22:15:02
Source Red Hat, Inc.
View at NVD,   CVE.org
Vulnerability category: Denial of service

Products affected by CVE-2024-4467

Please log in to view affected product information.

Exploit prediction scoring system (EPSS) score for CVE-2024-4467

EPSS FAQ
0.07%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 22 %
Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2024-4467

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
7.8
 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1.8
5.9
 Red Hat, Inc. 2024-07-02
7.8
 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
N/A
N/A
 RedHat-CVE-2024-4467 2024-07-02

CWE ids for CVE-2024-4467

References for CVE-2024-4467

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close