GHSA-v4q2-79g6-j728

GHSA-v4q2-79g6-j728 PUBLISHED CVSS 8.800000190734863 HIGH

Record from GitHub Advisory Database · Published February 20, 2024

Buffer Overflow vulnerability in Qemu before v.8.2.0 allows a remote attacker to execute arbitrary code via the async_len variable to the FIFO buffer component.

Risk scores

CVSS 3.1

8.800000190734863

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Timeline

Feb 20, 2024 CVE Published
Apr 10, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-v4q2-79g6-j728
vulnetix vdb fixes GHSA-v4q2-79g6-j728

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-v4q2-79g6-j728/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://github.com/qemu/qemu/commit/77668e4b9bca03a856c27ba899a2513ddf52bb52 fix
https://nvd.nist.gov/vuln/detail/CVE-2024-24474 advisory
https://gitlab.com/qemu-project/qemu/-/issues/1810 url
https://security.netapp.com/advisory/ntap-20240510-0012 url
https://gist.github.com/1047524396/5ce07b9d387095c276b1cd234ae5615e exploit

Look up in the Resolve Platform →