2 lines
12 KiB
JSON
2 lines
12 KiB
JSON
{"affected":[{"affectedData":[{"collectionURL":"https://gitlab.com/qemu-project/qemu","defaultStatus":"unaffected","packageName":"qemu","versions":[{"lessThan":"9.1.0","status":"affected","version":"4.0.0","versionType":"semver"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:advanced_virtualization:8.2::el8"],"defaultStatus":"affected","packageName":"virt:8.2","product":"Advanced Virtualization for RHEL 8.2.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8020120240708124623.863bb0db","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:advanced_virtualization:8.4::el8"],"defaultStatus":"affected","packageName":"virt:av","product":"Advanced Virtualization for RHEL 8.4.0.EUS","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020240708093550.522a0ee4","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:advanced_virtualization:8.4::el8"],"defaultStatus":"affected","packageName":"virt-devel:av","product":"Advanced Virtualization for RHEL 8.4.0.EUS","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020240708093550.522a0ee4","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/a:redhat:enterprise_linux:8::crb"],"defaultStatus":"affected","packageName":"virt-devel:rhel","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020240704072441.489197e6","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/a:redhat:enterprise_linux:8::crb"],"defaultStatus":"affected","packageName":"virt:rhel","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020240704072441.489197e6","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_e4s:8.4::appstream","cpe:/a:redhat:rhel_tus:8.4::appstream"],"defaultStatus":"affected","packageName":"virt:rhel","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020240703100448.522a0ee4","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_e4s:8.4::appstream","cpe:/a:redhat:rhel_tus:8.4::appstream"],"defaultStatus":"affected","packageName":"virt:rhel","product":"Red Hat Enterprise Linux 8.4 Telecommunications Update Service","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020240703100448.522a0ee4","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_e4s:8.4::appstream","cpe:/a:redhat:rhel_tus:8.4::appstream"],"defaultStatus":"affected","packageName":"virt:rhel","product":"Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020240703100448.522a0ee4","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_e4s:8.6::appstream","cpe:/a:redhat:rhel_tus:8.6::appstream"],"defaultStatus":"affected","packageName":"virt:rhel","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020240703092415.ad008a3a","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_e4s:8.6::appstream","cpe:/a:redhat:rhel_tus:8.6::appstream"],"defaultStatus":"affected","packageName":"virt:rhel","product":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020240703092415.ad008a3a","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_e4s:8.6::appstream","cpe:/a:redhat:rhel_tus:8.6::appstream"],"defaultStatus":"affected","packageName":"virt:rhel","product":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020240703092415.ad008a3a","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:8.8::appstream","cpe:/a:redhat:rhel_eus:8.8::crb"],"defaultStatus":"affected","packageName":"virt-devel:rhel","product":"Red Hat Enterprise Linux 8.8 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020240703085245.63b34585","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:8.8::appstream","cpe:/a:redhat:rhel_eus:8.8::crb"],"defaultStatus":"affected","packageName":"virt:rhel","product":"Red Hat Enterprise Linux 8.8 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020240703085245.63b34585","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"],"defaultStatus":"affected","packageName":"qemu-kvm","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"17:8.2.0-11.el9_4.4","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.0::appstream"],"defaultStatus":"affected","packageName":"qemu-kvm","product":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"17:6.2.0-11.el9_0.9","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.2::appstream"],"defaultStatus":"affected","packageName":"qemu-kvm","product":"Red Hat Enterprise Linux 9.2 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"17:7.2.0-14.el9_2.11","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:10"],"defaultStatus":"unaffected","packageName":"qemu-kvm","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"],"defaultStatus":"unaffected","packageName":"qemu-kvm","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"unaffected","packageName":"qemu-kvm","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"unaffected","packageName":"qemu-kvm-ma","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:advanced_virtualization:8::el8"],"defaultStatus":"affected","packageName":"virt:av/qemu-kvm","product":"Red Hat Enterprise Linux 8 Advanced Virtualization","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:container_native_virtualization:4"],"defaultStatus":"affected","packageName":"container-native-virtualization/virt-cdi-operator-rhel9","product":"Red Hat OpenShift Virtualization 4","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file."},{"lang":"es","value":"Se encontró una falla en el comando 'info' de la utilidad de imagen de disco QEMU (qemu-img). Un archivo de imagen especialmente manipulado que contenga un valor `json:{}` que describa los dispositivos de bloque en QMP podría provocar que el proceso qemu-img en el host consuma grandes cantidades de memoria o tiempo de CPU, lo que provocaría una denegación de servicio o lectura/escritura en un archivo externo existente."}],"id":"CVE-2024-4467","lastModified":"2026-11-04T22:17:22.367","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-4467","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-07-02T18:05:51.892288Z","version":"2.0.3"}}]},"published":"2024-07-02T16:15:05.423","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4276"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4277"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4278"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4372"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4373"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4374"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4420"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4724"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4727"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2024-4467"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278875"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2024/07/23/2"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4276"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4277"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4278"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4372"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4373"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4374"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4420"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4724"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4727"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/security/cve/CVE-2024-4467"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278875"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://security.netapp.com/advisory/ntap-20240822-0005/"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|