Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-4467: A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file. CVE-2024-3447: QEMU: sdhci: heap buffer overflow in sdhci_write_dataport()
Fixed packages 28
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | ivshmem-tools | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-audio-alsa | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-audio-oss | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-audio-pa | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-audio-sdl | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-block-curl | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-block-dmg | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-block-iscsi | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-block-nfs | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-block-rbd | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-block-ssh | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-common | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-debuginfo | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-guest-agent | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-img | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-kvm | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-kvm-core | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-system-aarch64 | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-system-aarch64-core | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-system-x86 | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-system-x86-core | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-ui-curses | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-ui-gtk | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-ui-sdl | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-user | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-user-binfmt | 10:3.1.0-8.amzn2.0.17 |
| Amazon Linux · 2 | qemu-user-static | 10:3.1.0-8.amzn2.0.17 |
Vulnerabilities 2
-
High 7.8
Qemu-kvm: 'qemu-img info' leads to host file read/write
A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time,…
-
Medium 6.0
Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()
A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash t…