[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2024-8612":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":18,"cwes":19,"cpes":21,"technologies":22,"references":23,"score":28,"epss_score":29,"epss_percentile":30,"is_kev":18,"cisa_kev_date_added":31,"cisa_kev_due_date":31,"cisa_ssvc":32,"attack_mappings":42,"exploits":49},40393,"CVE-2024-8612","EUVD-2024-49297","A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueue_push as set in virtio_scsi_complete_req \u002F virtio_blk_req_complete \u002F virito_crypto_req_complete could be larger than the true size of the data which has been sent to guest. Once virtqueue_push() finally calls dma_memory_unmap to ummap the in_iov, it may call the address_space_write function to write back the data. Some uninitialized data may exist in the bounce.buffer, leading to an information leak.","2024-09-20T18:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":17,"attackComplexity":15,"availabilityImpact":17,"privilegesRequired":15,"confidentialityImpact":15},"CHANGED","3.1",3.8,"LOCAL","LOW","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:N\u002FA:N","NONE",false,[20],"CWE-200",[],[],[24,25,26,27],"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2024-8612","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2313760","https:\u002F\u002Fgitlab.com\u002Fqemu-project\u002Fqemu\u002F-\u002Fcommit\u002F637b0aa139565cb82a7b9269e62214f87082635c","https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241108-0006\u002F",0.19,0.00204,0.10284,null,{"timestamp":33,"automatable":34,"tech_impact":35,"exploitation":36,"cisa_decision":37,"cisa_remediation_timeline":41},"2024-09-20T18:00:38.633928Z","no","partial","none",{"vector":38,"decision":39,"priority":40},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T17:09:34.480311\u002F","track_star","medium","60D",[43],{"name":44,"source":45,"tactics":46,"technique_id":48},"Exploitation for Privilege Escalation","attack_vector",[47],"privilege-escalation","T1068",[]]