CVE-2024-4467
High · 7.8CVSS
7.8
EPSS
0.3%
Published
Jul 2, 2024
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
A bug in a common virtualization tool lets attackers feed it a specially made file that can slow down or crash systems and potentially touch files they should not reach.
- Exploitation
- Local Privilege
- Attacker needs
- Low Privilege
- Complexity
- Low
- Impact
- Full Compromise
- Component
- Application
- Class
- Memory Corruption
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
A crafted disk image containing a json:{} block device descriptor triggers unbounded memory allocation and CPU consumption in qemu-img info, enabling denial of service and potential read/write access to arbitrary host files.
Why it matters to the business
Attackers can crash host image-processing workflows or access unauthorized files, causing operational disruption for virtualization and cloud image management pipelines until systems are updated to the fixed package version.
How an attack unfolds
An attacker prepares a malicious disk image embedding a json:{} QMP block device description, then invokes qemu-img info on the file; the process parses the descriptor, allocates excessive resources, and may leak data to or from external files on the host.
How to fix it
Upgrade qemu-img to version 6.7.12-1 or later on Debian 13 systems; rebuild any dependent images or containers after the package update and restrict untrusted image processing to isolated environments.
How to confirm the fix worked
Run qemu-img info --version and confirm the installed package reports 6.7.12-1 or newer; test with known-good and crafted images in a lab to verify resource usage remains bounded.
Typical attack path
- Craft a disk image file embedding a json:{} block device descriptor
- Supply the image to qemu-img info on a vulnerable host
- Trigger excessive memory or CPU consumption leading to denial of service
- Leverage side effects to read from or write to arbitrary external files
How to detect it
Search host process accounting and audit logs for qemu-img invocations consuming unusually high memory or CPU; inspect command-line arguments and input file paths for unexpected image sources.
What your security team should do
- Immediately update qemu packages on all Debian 13 hosts to 6.7.12-1
- Add qemu-img invocations to monitored process allow-lists and resource limits
- Scan build pipelines and CI jobs for direct use of qemu-img on untrusted images
- Review file-access controls around qemu-img working directories
The record
A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | SLOF | 0 | 20210217-2.module_el8.10.0+3768+dfd76e10 |
| AlmaLinux:8 | hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | hivex-devel | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | hivex-devel | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libguestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-appliance | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-bash-completion | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-devel | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-gfs2 | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-gobject | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-gobject-devel | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-inspect-icons | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-java | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-java-devel | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-javadoc | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-man-pages-ja | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-man-pages-uk | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-rescue | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-rsync | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-tools | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-tools-c | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-winsupport | 0 | 8.10-1.module_el8.10.0+3768+dfd76e10 |
| AlmaLinux:8 | libguestfs-xfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libiscsi | 0 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libiscsi | 0 | 1.18.0-8.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libiscsi-devel | 0 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libiscsi-devel | 0 | 1.18.0-8.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libiscsi-utils | 0 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libiscsi-utils | 0 | 1.18.0-8.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libnbd | 0 | 1.6.0-5.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libnbd | 0 | 1.6.0-5.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libnbd-bash-completion | 0 | 1.6.0-5.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libnbd-devel | 0 | 1.6.0-5.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libnbd-devel | 0 | 1.6.0-5.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libtpms | 0 | 0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | libtpms-devel | 0 | 0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | libvirt | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-client | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-client | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-config-network | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-config-network | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-config-nwfilter | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-interface | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-network | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-network | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-nodedev | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-nodedev | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-nwfilter | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-qemu | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-secret | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-secret | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-core | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-core | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-disk | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-disk | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-gluster | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-gluster | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-iscsi | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-iscsi | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-iscsi-direct | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-iscsi-direct | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-logical | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-logical | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-mpath | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-mpath | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-rbd | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-rbd | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-scsi | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-scsi | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-kvm | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-kvm | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-dbus | 0 | 1.3.0-2.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libvirt-dbus | 0 | 1.3.0-2.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libvirt-devel | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-docs | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-libs | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-lock-sanlock | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-lock-sanlock | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-nss | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-wireshark | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-wireshark | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | lua-guestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | nbdfuse | 0 | 1.6.0-5.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | nbdfuse | 0 | 1.6.0-5.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | nbdkit | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-bash-completion | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-basic-filters | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-basic-plugins | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-curl-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-devel | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-example-plugins | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-gzip-filter | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-gzip-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-linuxdisk-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-nbd-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-python-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-server | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-ssh-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-tar-filter | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-tar-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-tmpdisk-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-vddk-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-xz-filter | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | netcf | 0 | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | netcf | 0 | 0.2.8-12.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | netcf-devel | 0 | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | netcf-devel | 0 | 0.2.8-12.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | netcf-libs | 0 | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | netcf-libs | 0 | 0.2.8-12.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ocaml-hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | ocaml-hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ocaml-hivex-devel | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | ocaml-hivex-devel | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ocaml-libguestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | ocaml-libguestfs-devel | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | ocaml-libnbd | 0 | 1.6.0-5.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | ocaml-libnbd | 0 | 1.6.0-5.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ocaml-libnbd-devel | 0 | 1.6.0-5.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | ocaml-libnbd-devel | 0 | 1.6.0-5.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | perl-Sys-Guestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | perl-Sys-Virt | 0 | 8.0.0-1.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | perl-Sys-Virt | 0 | 8.0.0-1.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | perl-hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | perl-hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | python3-hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | python3-hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | python3-libguestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | python3-libnbd | 0 | 1.6.0-5.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | python3-libnbd | 0 | 1.6.0-5.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | python3-libvirt | 0 | 8.0.0-2.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | qemu-guest-agent | 0 | 15:6.2.0-50.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | qemu-img | 0 | 15:6.2.0-50.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | qemu-kvm | 0 | 15:6.2.0-50.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | qemu-kvm-block-curl | 0 | 15:6.2.0-50.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | qemu-kvm-block-gluster | 0 | 15:6.2.0-50.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | qemu-kvm-block-iscsi | 0 | 15:6.2.0-50.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | qemu-kvm-block-rbd | 0 | 15:6.2.0-50.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | qemu-kvm-block-ssh | 0 | 15:6.2.0-50.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | qemu-kvm-common | 0 | 15:6.2.0-50.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | qemu-kvm-core | 0 | 15:6.2.0-50.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | qemu-kvm-docs | 0 | 15:6.2.0-50.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | qemu-kvm-hw-usbredir | 0 | 15:6.2.0-50.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | qemu-kvm-tests | 0 | 15:6.2.0-50.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | qemu-kvm-ui-opengl | 0 | 15:6.2.0-50.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | qemu-kvm-ui-spice | 0 | 15:6.2.0-50.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | ruby-hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | ruby-hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ruby-libguestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | seabios | 0 | 1.16.0-4.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | seabios-bin | 0 | 1.16.0-4.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | seavgabios-bin | 0 | 1.16.0-4.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | sgabios | 0 | 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | sgabios-bin | 0 | 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | supermin | 0 | 5.2.1-2.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | supermin-devel | 0 | 5.2.1-2.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm-devel | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm-libs | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm-tools | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm-tools-pkcs11 | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | virt-dib | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | virt-v2v | 0 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | virt-v2v-bash-completion | 0 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | virt-v2v-man-pages-ja | 0 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | virt-v2v-man-pages-uk | 0 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:9 | qemu-guest-agent | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-img | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-kvm | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-kvm-audio-pa | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-kvm-block-blkio | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-kvm-block-curl | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-kvm-block-rbd | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-kvm-common | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-kvm-core | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu-ccw | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu-pci | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-vga | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-kvm-device-usb-host | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-kvm-device-usb-redirect | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-kvm-docs | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-kvm-tools | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-kvm-ui-egl-headless | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-kvm-ui-opengl | 0 | 17:8.2.0-11.el9_4.4 |
| AlmaLinux:9 | qemu-pr-helper | 0 | 17:8.2.0-11.el9_4.4 |
| Debian:11 | qemu | 0 | No fix |
| Debian:12 | qemu | 0 | 1:7.2+dfsg-7+deb12u7 |
| Debian:13 | qemu | 0 | 1:9.0.1+ds-1 |
| Mageia:9 | qemu | 0 | 7.2.15-1.mga9 |
| Red Hat:advanced_virtualization:8.2::el8 | SLOF | 0 | 0:20191022-3.git899d9883.module+el8.2.0+5449+efc036dd |
| Red Hat:advanced_virtualization:8.2::el8 | hivex | 0 | 0:1.3.18-20.module+el8.2.0+5588+63a201c3 |
| Red Hat:advanced_virtualization:8.2::el8 | hivex-debuginfo | 0 | 0:1.3.18-20.module+el8.2.0+5588+63a201c3 |
| Red Hat:advanced_virtualization:8.2::el8 | hivex-debugsource | 0 | 0:1.3.18-20.module+el8.2.0+5588+63a201c3 |
| Red Hat:advanced_virtualization:8.2::el8 | hivex-devel | 0 | 0:1.3.18-20.module+el8.2.0+5588+63a201c3 |
Related vulnerabilities
- CVE-2024-7383 A flaw was found in libnbd. Also affects SLOF
- CVE-2024-7409 A flaw was found in the QEMU NBD Server. Also affects SLOF
- CVE-2024-4418 A race condition leading to a stack use-after-free flaw was found in libvirt. Also affects SLOF
- CVE-2024-3446 A double free vulnerability was found in QEMU virtio devices (virtio-gpu… Also affects SLOF
- CVE-2023-1018 An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte… Also affects SLOF
- CVE-2019-11135 TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow… Also affects libiscsi
- CVE-2024-26327 An issue was discovered in QEMU 7.1.0 through 8.2.1. Also affects qemu-guest-agent
- CVE-2023-3019 A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC… Also affects qemu-guest-agent