Lucene search
OracleLinuxELSA-2024-4420HistoryJul 12, 2024 - 12:00 a.m.
virt:ol and virt-devel:rhel security update
2024-07-1200:00:00
linux.oracle.com
27
virtualization packages
libvirt
qemu-kvm
security update
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
6.9
Confidence
Low
EPSS
0
Percentile
13.8%
hivex
libguestfs
libguestfs-winsupport
libiscsi
libnbd
libtpms
libvirt
libvirt-dbus
libvirt-python
nbdkit
netcf
perl-Sys-Virt
qemu-kvm
[6.2.0-50]
- kvm-qcow2-Don-t-open-data_file-with-BDRV_O_NO_IO.patch [RHEL-35616]
- kvm-iotests-244-Don-t-store-data-file-with-protocol-in-i.patch [RHEL-35616]
- kvm-iotests-270-Don-t-store-data-file-with-json-prefix-i.patch [RHEL-35616]
- kvm-block-introduce-bdrv_open_file_child-helper.patch [RHEL-35616]
- kvm-block-Parse-filenames-only-when-explicitly-requested.patch [RHEL-35616]
- Resolves: RHEL-35616
(CVE-2024-4467 virt:rhel/qemu-kvm: QEMU: ‘qemu-img info’ leads to host file read/write [rhel-8.10.z])
seabios
sgabios
supermin
swtpm
virt-v2v
Related
nessus
nessus
RHEL 9 : qemu-kvm (RHSA-2024:4277)
2024-07-02 00:00:00
RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2024:4373)
2024-07-08 00:00:00
AlmaLinux 8 : virt:rhel and virt-devel:rhel (ALSA-2024:4420)
2024-07-11 00:00:00
ubuntucve
ubuntucve
CVE-2024-4467
2024-07-02 00:00:00
redhat
redhat
(RHSA-2024:4420) Important: virt:rhel and virt-devel:rhel security update
2024-07-09 09:48:22
(RHSA-2024:4278) Important: qemu-kvm security update
2024-07-02 19:30:59
(RHSA-2024:4372) Important: virt:rhel and virt-devel:rhel security update
2024-07-08 13:08:38
osv
osv
Important: virt:rhel and virt-devel:rhel security update
2024-07-09 00:00:00
CVE-2024-4467
2024-07-02 16:15:00
Important: qemu-kvm security update
2024-07-02 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2024-2405)
2024-09-12 00:00:00
openSUSE: Security Advisory for qemu (SUSE-SU-2024:3077-1)
2024-09-04 00:00:00
Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2024-2380)
2024-09-12 00:00:00
redhatcve
redhatcve
CVE-2024-4467
2024-07-02 15:56:35
CVE-2024-32498
2024-07-02 17:32:55
vulnrichment
vulnrichment
CVE-2024-4467 Qemu-kvm: 'qemu-img info' leads to host file read/write
2024-07-02 15:57:23
debiancve
debiancve
CVE-2024-4467
2024-07-02 16:15:05
nvd
nvd
CVE-2024-4467
2024-07-02 16:15:05
almalinux
almalinux
Important: qemu-kvm security update
2024-07-02 00:00:00
Important: virt:rhel and virt-devel:rhel security update
2024-07-09 00:00:00
redos
redos
ROS-20240917-03
2024-09-17 00:00:00
oraclelinux
oraclelinux
qemu-kvm security update
2024-07-02 00:00:00
virt:kvm_utils3 security update
2024-09-02 00:00:00
cvelist
cvelist
CVE-2024-4467 Qemu-kvm: 'qemu-img info' leads to host file read/write
2024-07-02 15:57:23
cve
cve
CVE-2024-4467
2024-07-02 16:15:05
virtuozzo
virtuozzo
Virtuozzo Hybrid Infrastructure 6.0 Update 1.9 (6.0.1-102)
2024-07-17 00:00:00
Virtuozzo Hybrid Infrastructure 6.1 Update 1.5 (6.1.1-49)
2024-07-17 00:00:00
Virtuozzo Hybrid Infrastructure 6.2 (6.2.0-142)
2024-07-17 00:00:00
amazon
amazon
Important: qemu
2024-08-14 19:06:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
6.9
Confidence
Low
EPSS
0
Percentile
13.8%
Related for ELSA-2024-4420