https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 06:34:50 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:4278 <p><strong>Affected:</strong> AlmaLinux:9: qemu-guest-agent, AlmaLinux:9: qemu-img, AlmaLinux:9: qemu-kvm, AlmaLinux:9: qemu-kvm-audio-pa, AlmaLinux:9: qemu-kvm-block-blkio, AlmaLinux:9: qemu-kvm-block-curl, AlmaLinux:9: qemu-kvm-block-rbd, AlmaLinux:9: qemu-kvm-common, AlmaLinux:9: qemu-kvm-core, AlmaLinux:9: qemu-kvm-device-display-virtio-gpu and 10 more</p> <p>Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.</p> <p>Security Fix(es):</p> <p>* qemu-kvm: QEMU: &#39;qemu-img info&#39; leads to host file read/write (CVE-2024-4467)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: qemu-guest-agent, AlmaLinux:9: qemu-img, AlmaLinux:9: qemu-kvm, AlmaLinux:9: qemu-kvm-audio-pa, AlmaLinux:9: qemu-kvm-block-blkio, AlmaLinux:9: qemu-kvm-block-curl, AlmaLinux:9: qemu-kvm-block-rbd, AlmaLinux:9: qemu-kvm-common, AlmaLinux:9: qemu-kvm-core, AlmaLinux:9: qemu-kvm-device-display-virtio-gpu and 10 more</p> <p>Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.</p> <p>Security Fix(es):</p> <p>* qemu-kvm: QEMU: &#39;qemu-img info&#39; leads to host file read/write (CVE-2024-4467)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:4278 https://cve.radiocsirt.org/vuln/bdu:2024-06923 bdu:2024-06923 https://cve.radiocsirt.org/vuln/bdu:2024-06923 https://cve.radiocsirt.org/vuln/bell-cve-2024-4467 <p><strong>Affected:</strong> Alpaquita:23: qemu, Alpaquita:stream: qemu</p> <p><strong>Affected:</strong> Alpaquita:23: qemu, Alpaquita:stream: qemu</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-4467 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0967 certfr-2025-avi-0967 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0967 https://cve.radiocsirt.org/vuln/cnvd-2024-31523 cnvd-2024-31523 https://cve.radiocsirt.org/vuln/cnvd-2024-31523 https://cve.radiocsirt.org/vuln/euvd-2026-270734 EUVD-2026-270734 https://cve.radiocsirt.org/vuln/euvd-2026-270734 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4467 <p>A flaw was found in the QEMU disk image utility (qemu-img) &#39;info&#39; command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.</p> <p>A flaw was found in the QEMU disk image utility (qemu-img) &#39;info&#39; command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-4467 https://cve.radiocsirt.org/vuln/ghsa-5cwv-6xqx-92m5 <p>A flaw was found in the QEMU disk image utility (qemu-img) &#39;info&#39; command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.</p> <p>A flaw was found in the QEMU disk image utility (qemu-img) &#39;info&#39; command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.</p> https://cve.radiocsirt.org/vuln/ghsa-5cwv-6xqx-92m5 https://cve.radiocsirt.org/vuln/msrc_cve-2024-4467 msrc_CVE-2024-4467 https://cve.radiocsirt.org/vuln/msrc_cve-2024-4467 https://cve.radiocsirt.org/vuln/oesa-2024-1858 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: qemu, openEuler:24.03-LTS: qemu, openEuler:22.03-LTS-SP4: qemu, openEuler:22.03-LTS-SP1: qemu, openEuler:22.03-LTS-SP3: qemu</p> <p>QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.</p> <p>Security Fix(es):</p> <p>A flaw was found in the QEMU disk image utility (qemu-img) &amp;apos;info&amp;apos; command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.(CVE-2024-4467)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: qemu, openEuler:24.03-LTS: qemu, openEuler:22.03-LTS-SP4: qemu, openEuler:22.03-LTS-SP1: qemu, openEuler:22.03-LTS-SP3: qemu</p> <p>QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.</p> <p>Security Fix(es):</p> <p>A flaw was found in the QEMU disk image utility (qemu-img) &amp;apos;info&amp;apos; command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.(CVE-2024-4467)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1858 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14411-1 <p>qemu-9.1.0-2.1 on GA media</p> <p>qemu-9.1.0-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14411-1 https://cve.radiocsirt.org/vuln/rhsa-2024:4276 <p>qemu-kvm: &#39;qemu-img info&#39; leads to host file read/write</p> <p>qemu-kvm: &#39;qemu-img info&#39; leads to host file read/write</p> https://cve.radiocsirt.org/vuln/rhsa-2024:4276 https://cve.radiocsirt.org/vuln/suse-su-2024:2983-1 <p>Security update for qemu</p> <p>Security update for qemu</p> https://cve.radiocsirt.org/vuln/suse-su-2024:2983-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-4467 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: qemu, Ubuntu:22.04:LTS: qemu, Ubuntu:24.04:LTS: qemu</p> <p>A flaw was found in the QEMU disk image utility (qemu-img) &#39;info&#39; command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: qemu, Ubuntu:22.04:LTS: qemu, Ubuntu:24.04:LTS: qemu</p> <p>A flaw was found in the QEMU disk image utility (qemu-img) &#39;info&#39; command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-4467 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1509 <p>Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen und vertrauliche Informationen offenzulegen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen und vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1509