Vulnerability · Published Nov 26, 2024 · Assigned by redhat

CVE-2024-52337Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Medium 5.5

In plain English

A medium-severity improper input validation in tuned. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium

Exploit odds (30 days)0.3%top 77.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick the administrator. The quotes '' are usually used in TuneD logs citing raw user input, so there will always be the ' character ending the spoofed input, and the administrator can easily overlook this. This logged string is later used in logging and in the output of utilities, for example, `tuned-adm get_instances` or other third-party programs that use Tuned's D-Bus interface for such operations.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
AlmaLinux:8	tuned	2.22.1-5.el8_10	ALSA-2024:11161
AlmaLinux:9	tuned	2.24.0-2.el9_5.alma.1	ALSA-2024:10384
AlmaLinux:8	tuned-gtk	2.22.1-5.el8_10	ALSA-2024:11161
AlmaLinux:9	tuned-gtk	2.24.0-2.el9_5.alma.1	ALSA-2024:10384
AlmaLinux:9	tuned-ppd	2.24.0-2.el9_5.alma.1	ALSA-2024:10384
AlmaLinux:8	tuned-profiles-atomic	2.22.1-5.el8_10	ALSA-2024:11161
AlmaLinux:9	tuned-profiles-atomic	2.24.0-2.el9_5.alma.1	ALSA-2024:10384
AlmaLinux:8	tuned-profiles-compat	2.22.1-5.el8_10	ALSA-2024:11161
AlmaLinux:8	tuned-profiles-cpu-partitioning	2.22.1-5.el8_10	ALSA-2024:11161
AlmaLinux:9	tuned-profiles-cpu-partitioning	2.24.0-2.el9_5.alma.1	ALSA-2024:10384
AlmaLinux:8	tuned-profiles-mssql	2.22.1-5.el8_10	ALSA-2024:11161
AlmaLinux:9	tuned-profiles-mssql	2.24.0-2.el9_5.alma.1	ALSA-2024:10384
AlmaLinux:8	tuned-profiles-oracle	2.22.1-5.el8_10	ALSA-2024:11161
AlmaLinux:9	tuned-profiles-oracle	2.24.0-2.el9_5.alma.1	ALSA-2024:10384
AlmaLinux:8	tuned-profiles-postgresql	2.22.1-5.el8_10	ALSA-2024:11161
AlmaLinux:9	tuned-profiles-postgresql	2.24.0-2.el9_5.alma.1	ALSA-2024:10384
AlmaLinux:8	tuned-profiles-realtime	2.22.1-5.el8_10	ALSA-2024:11161
AlmaLinux:9	tuned-profiles-realtime	2.24.0-2.el9_5.alma.1	ALSA-2024:10384
AlmaLinux:9	tuned-profiles-spectrumscale	2.24.0-2.el9_5.alma.1	ALSA-2024:10384
AlmaLinux:8	tuned-utils	2.22.1-5.el8_10	ALSA-2024:11161
AlmaLinux:9	tuned-utils	2.24.0-2.el9_5.alma.1	ALSA-2024:10384
AlmaLinux:8	tuned-utils-systemtap	2.22.1-5.el8_10	ALSA-2024:11161
Debian:13	tuned	2.24.1-1	DEBIAN-CVE-2024-52337
Debian:14	tuned	2.24.1-1	DEBIAN-CVE-2024-52337
Rocky Linux:8	tuned	0:2.22.1-5.el8_10	RLSA-2024:11161
Rocky Linux:9	tuned	0:2.24.0-2.el9_5	RLSA-2024:10384
Ubuntu:22.04:LTS	tuned	no fix listed	UBUNTU-CVE-2024-52337
Ubuntu:24.04:LTS	tuned	no fix listed	UBUNTU-CVE-2024-52337
Ubuntu:25.10	tuned	no fix listed	UBUNTU-CVE-2024-52337
Ubuntu:26.04:LTS	tuned	no fix listed	UBUNTU-CVE-2024-52337
Ubuntu:26.10	tuned	no fix listed	UBUNTU-CVE-2024-52337

Affected products (as reported)

Vendor	Product	Versions
	tuned	2.23.0 – before 2.24.1
Red Hat	Fast Datapath for Red Hat Enterprise Linux 7	see references
Red Hat	Fast Datapath for Red Hat Enterprise Linux 8	see references
Red Hat	Fast Datapath for Red Hat Enterprise Linux 9	see references
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	see references
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	see references
Red Hat	Red Hat Enterprise Linux 8	see references
Red Hat	Red Hat Enterprise Linux 8	see references
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	see references
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	see references
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	see references
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	see references
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 9	see references
Red Hat	Red Hat Enterprise Linux 9	see references
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 10	see references
Red Hat	Red Hat Enterprise Linux 6	see references

Weakness: CWE-20 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

References

RHSA-2024:10381 vendor-advisory, x_refsource_REDHAT
RHSA-2024:10384 vendor-advisory, x_refsource_REDHAT
RHSA-2024:11161 vendor-advisory, x_refsource_REDHAT
RHSA-2025:0195 vendor-advisory, x_refsource_REDHAT
RHSA-2025:0327 vendor-advisory, x_refsource_REDHAT
RHSA-2025:0368 vendor-advisory, x_refsource_REDHAT
RHSA-2025:0879 vendor-advisory, x_refsource_REDHAT
RHSA-2025:0880 vendor-advisory, x_refsource_REDHAT
RHSA-2025:0881 vendor-advisory, x_refsource_REDHAT
RHSA-2025:1785 vendor-advisory, x_refsource_REDHAT
RHSA-2025:1802 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-52337 vdb-entry, x_refsource_REDHAT
RHBZ#2324541 issue-tracking, x_refsource_REDHAT
https://github.com/redhat-performance/tuned/releases/tag/v2.24.1
https://security.opensuse.org/2024/11/26/tuned-instance-create.html
https://www.openwall.com/lists/oss-security/2024/11/28/1
https://www.openwall.com/lists/oss-security/2024/11/28/2