{"id":"CVE-2024-4467","title":"Qemu-kvm: 'qemu-img info' leads to host file read/write","summary":"A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts …","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-787"],"vendor":"Red Hat","product":"qemu","affected":["qemu >= 4.0.0 < 9.1.0","virt:8.2 (all versions)","virt:av (all versions)","virt-devel:av (all versions)","virt-devel:rhel (all versions)","virt:rhel (all versions)","virt:rhel (all versions)","virt:rhel (all versions)","virt:rhel (all versions)","virt:rhel (all versions)","virt:rhel (all versions)","virt:rhel (all versions)","virt-devel:rhel (all versions)","virt:rhel (all versions)","qemu-kvm (all versions)","qemu-kvm (all versions)","qemu-kvm (all versions)","qemu-kvm","qemu-kvm","qemu-kvm","qemu-kvm-ma","virt:av/qemu-kvm (all versions)","container-native-virtualization/virt-cdi-operator-rhel9 (all versions)"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2024-07-02T18:05:51.892288Z"},"published":"2024-07-02","updated":"2026-11-04","sourceUpdated":"2026-11-04T21:21:10.377Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-4467","references":[{"url":"https://access.redhat.com/errata/RHSA-2024:4276","label":"RHSA-2024:4276"},{"url":"https://access.redhat.com/errata/RHSA-2024:4277","label":"RHSA-2024:4277"},{"url":"https://access.redhat.com/errata/RHSA-2024:4278","label":"RHSA-2024:4278"},{"url":"https://access.redhat.com/errata/RHSA-2024:4372","label":"RHSA-2024:4372"},{"url":"https://access.redhat.com/errata/RHSA-2024:4373","label":"RHSA-2024:4373"},{"url":"https://access.redhat.com/errata/RHSA-2024:4374","label":"RHSA-2024:4374"},{"url":"https://access.redhat.com/errata/RHSA-2024:4420","label":"RHSA-2024:4420"},{"url":"https://access.redhat.com/errata/RHSA-2024:4724","label":"RHSA-2024:4724"},{"url":"https://access.redhat.com/errata/RHSA-2024:4727","label":"RHSA-2024:4727"},{"url":"https://access.redhat.com/security/cve/CVE-2024-4467"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278875","label":"RHBZ#2278875"}],"tags":["cve.org"],"epss":0.00336,"epssPercentile":0.27143,"ingestedAt":"2026-11-05T21:36:00.610Z","slug":"CVE-2024-4467","body":"## Overview\n\nA flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.\n\n## Affected\n\n- `qemu >= 4.0.0 < 9.1.0`\n- `virt:8.2 (all versions)`\n- `virt:av (all versions)`\n- `virt-devel:av (all versions)`\n- `virt-devel:rhel (all versions)`\n- `virt:rhel (all versions)`\n- `virt:rhel (all versions)`\n- `virt:rhel (all versions)`\n- `virt:rhel (all versions)`\n- `virt:rhel (all versions)`\n- `virt:rhel (all versions)`\n- `virt:rhel (all versions)`\n- `virt-devel:rhel (all versions)`\n- `virt:rhel (all versions)`\n- `qemu-kvm (all versions)`\n- `qemu-kvm (all versions)`\n- `qemu-kvm (all versions)`\n- `qemu-kvm`\n- `qemu-kvm`\n- `qemu-kvm`\n- `qemu-kvm-ma`\n- `virt:av/qemu-kvm (all versions)`\n- `container-native-virtualization/virt-cdi-operator-rhel9 (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}