CVE-2024-4467: Red Hat Advanced Virtualization For Rhel 8.2.1
High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.
A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.
Affected products
- Red Hat Advanced Virtualization For Rhel 8.2.1: before 8020120240708124623.863bb0db (fixed in 8020120240708124623.863bb0db)
- Red Hat Advanced Virtualization For Rhel 8.4.0.eus: before 8040020240708093550.522a0ee4 (fixed in 8040020240708093550.522a0ee4)
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat Enterprise Linux 6
- Red Hat Red Hat Enterprise Linux 7
- Red Hat Red Hat Enterprise Linux 8: before 8100020240704072441.489197e6 (fixed in 8100020240704072441.489197e6)
- Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: before 8040020240703100448.522a0ee4 (fixed in 8040020240703100448.522a0ee4)
- Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service: before 8040020240703100448.522a0ee4 (fixed in 8040020240703100448.522a0ee4)
- Red Hat Red Hat Enterprise Linux 8.4 Update Services For SAP Solutions: before 8040020240703100448.522a0ee4 (fixed in 8040020240703100448.522a0ee4)
- Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: before 8060020240703092415.ad008a3a (fixed in 8060020240703092415.ad008a3a)
- Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service: before 8060020240703092415.ad008a3a (fixed in 8060020240703092415.ad008a3a)
- Red Hat Red Hat Enterprise Linux 8.6 Update Services For SAP Solutions: before 8060020240703092415.ad008a3a (fixed in 8060020240703092415.ad008a3a)
- Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support: before 8080020240703085245.63b34585 (fixed in 8080020240703085245.63b34585)
- Red Hat Red Hat Enterprise Linux 8 Advanced Virtualization
- Red Hat Red Hat Enterprise Linux 9: before 17:8.2.0-11.el9_4.4 (fixed in 17:8.2.0-11.el9_4.4)
- Red Hat Red Hat Enterprise Linux 9.0 Update Services For SAP Solutions: before 17:6.2.0-11.el9_0.9 (fixed in 17:6.2.0-11.el9_0.9)
- Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support: before 17:7.2.0-14.el9_2.11 (fixed in 17:7.2.0-14.el9_2.11)
- Red Hat Red Hat Openshift Virtualization 4
Published 2024-07-02. Last modified 2026-06-17.