Threats Tagged 'cve-2024-52337'

Two security vulnerabilities were identified in the tuned service of Red Hat Enterprise Linux 9, which tunes system settings based on selected profiles. The first vulnerability (CVE-2024-52336) involves the `script_pre` and `script_post` options that allow arbitrary scripts to be executed with root privileges. The second vulnerability (CVE-2024-52337) concerns improper sanitization of the `instance_name` parameter in the `instance_create()` method. Red Hat has issued an important security update addressing these issues for multiple variants of Red Hat Enterprise Linux 9. The update mitigates the risk by fixing the script execution and input sanitization flaws. No CVSS score is provided, but the severity is rated as high by the source.

A security vulnerability (CVE-2024-52337) exists in the tuned package used by Red Hat Enterprise Linux 9.2 Extended Update Support. The issue involves improper sanitization of the instance_name parameter in the instance_create() method. This vulnerability has been rated with moderate severity by Red Hat Product Security. A security update addressing this issue is available for multiple Red Hat Enterprise Linux 9.2 variants, including x86_64, s390x, ppc64le, and aarch64 architectures.