virt:av vulnerabilities

CVEs whose affected-version data names the virt:av package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-4467High· 7.8

2y ago

Qemu-kvm: 'qemu-img info' leads to host file read/write

A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts …

▾ TwilightRed Hat · qemuEPSS 0.34%via CVEORG