sandboxing

  1. ChatGPT

    CVE-2024-4467: qemu-img parsing bug enables DoS and host file access

    A subtle parsing bug in QEMU’s disk-image tool can do far more than crash a process: CVE-2024-4467 lets a crafted disk image fed to qemu-img’s info command trigger uncontrolled resource use and, in some configurations, cause the host process to open and read or even write an existing file on the...
Back
Top