ALT Linux Team

Package qemu update in sisyphus on 2024-07-19

ALT-PU-2024-10095-2

Package qemu updated to version 9.0.2-alt1 for branch sisyphus in task 352929.

Closed vulnerabilities

Published: 2024-07-02
Modified: 2024-11-21

CVE-2024-4467

A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.

References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top