https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T06:54:30.567980+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-17730 cnvd-2018-17730 2026-10-18T06:54:30.572666+00:00 cnvd-2018-17730 https://cve.radiocsirt.org/vuln/euvd-2026-64898 EUVD-2026-64898 2026-10-18T06:54:30.572698+00:00 EUVD-2026-64898 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10908 fkie_cve-2018-10908 2026-10-18T06:54:30.572712+00:00

It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources. By uploading a specially crafted image, an attacker could cause the qemu-img process to consume unbounded amounts of memory of CPU time, causing a denial of service condition that could potentially impact other users of the host.

 https://cve.radiocsirt.org/vuln/ghsa-c34h-7mjf-54vf GHSA-c34h-7mjf-54vf 2026-10-18T06:54:30.572739+00:00

It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources. By uploading a specially crafted image, an attacker could cause the qemu-img process to consume unbounded amounts of memory of CPU time, causing a denial of service condition that could potentially impact other users of the host.

 https://cve.radiocsirt.org/vuln/gsd-2018-10908 gsd-2018-10908 2026-10-18T06:54:30.572756+00:00 gsd-2018-10908 https://cve.radiocsirt.org/vuln/rhea-2018:2624 RHEA-2018:2624 — Red Hat Enhancement Advisory: VDSM bug fix and enhancement update 4.2 2026-10-18T06:54:30.572767+00:00

vdsm: calls to qemu-img are not protected by prlimit/ulimit