CVE-2024-33394 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-33394 Interim 1 16 2026-03-05T02:36:04Z current 2024-05-06T23:09:12Z 2026-03-05T02:36:04Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-33394 An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2024-July/018830.html E-Mail link for SUSE-SU-2024:2246-1 https://lists.suse.com/pipermail/sle-updates/2024-July/035833.html E-Mail link for SUSE-SU-2024:2318-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Micro 6.1 openSUSE Leap 15.5 openSUSE Leap 15.6 openSUSE Leap Micro 5.5 openSUSE Tumbleweed kubevirt kubevirt-container-disk-1.1.1-150500.8.18.1 kubevirt-container-disk-1.1.1-150600.5.3.2 kubevirt-container-disk-1.2.2-2.1 kubevirt-manifests kubevirt-manifests-1.1.1-150500.8.18.1 kubevirt-manifests-1.1.1-150600.5.3.2 kubevirt-manifests-1.2.2-2.1 kubevirt-manifests-1.3.1-slfo.1.1_1.3 kubevirt-manifests-1.5.0-150700.1.3 kubevirt-pr-helper-conf-1.1.1-150600.5.3.2 kubevirt-pr-helper-conf-1.2.2-2.1 kubevirt-tests-1.1.1-150500.8.18.1 kubevirt-tests-1.1.1-150600.5.3.2 kubevirt-tests-1.2.2-2.1 kubevirt-virt-api-1.1.1-150500.8.18.1 kubevirt-virt-api-1.1.1-150600.5.3.2 kubevirt-virt-api-1.2.2-2.1 kubevirt-virt-controller-1.1.1-150500.8.18.1 kubevirt-virt-controller-1.1.1-150600.5.3.2 kubevirt-virt-controller-1.2.2-2.1 kubevirt-virt-exportproxy-1.1.1-150500.8.18.1 kubevirt-virt-exportproxy-1.1.1-150600.5.3.2 kubevirt-virt-exportproxy-1.2.2-2.1 kubevirt-virt-exportserver-1.1.1-150500.8.18.1 kubevirt-virt-exportserver-1.1.1-150600.5.3.2 kubevirt-virt-exportserver-1.2.2-2.1 kubevirt-virt-handler-1.1.1-150500.8.18.1 kubevirt-virt-handler-1.1.1-150600.5.3.2 kubevirt-virt-handler-1.2.2-2.1 kubevirt-virt-launcher-1.1.1-150500.8.18.1 kubevirt-virt-launcher-1.1.1-150600.5.3.2 kubevirt-virt-launcher-1.2.2-2.1 kubevirt-virt-operator-1.1.1-150500.8.18.1 kubevirt-virt-operator-1.1.1-150600.5.3.2 kubevirt-virt-operator-1.2.2-2.1 kubevirt-virtctl kubevirt-virtctl-1.1.1-150500.8.18.1 kubevirt-virtctl-1.1.1-150600.5.3.2 kubevirt-virtctl-1.2.2-2.1 kubevirt-virtctl-1.3.1-slfo.1.1_1.3 kubevirt-virtctl-1.5.0-150700.1.3 kubevirt-virtctl-1.5.2-160000.1.2 obs-service-kubevirt_containers_meta-1.1.1-150500.8.18.1 obs-service-kubevirt_containers_meta-1.1.1-150600.5.3.2 obs-service-kubevirt_containers_meta-1.2.2-2.1 kubevirt-manifests-1.1.1-150500.8.18.1 as a component of SUSE Linux Enterprise Micro 5.5 kubevirt-virtctl-1.1.1-150500.8.18.1 as a component of SUSE Linux Enterprise Micro 5.5 kubevirt-manifests-1.1.1-150500.8.18.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubevirt-virtctl-1.1.1-150500.8.18.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubevirt-manifests-1.1.1-150600.5.3.2 as a component of SUSE Linux Enterprise Module for Containers 15 SP6 kubevirt-virtctl-1.1.1-150600.5.3.2 as a component of SUSE Linux Enterprise Module for Containers 15 SP6 kubevirt-manifests-1.5.0-150700.1.3 as a component of SUSE Linux Enterprise Module for Containers 15 SP7 kubevirt-virtctl-1.5.0-150700.1.3 as a component of SUSE Linux Enterprise Module for Containers 15 SP7 kubevirt-virtctl-1.5.2-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 kubevirt-manifests-1.3.1-slfo.1.1_1.3 as a component of SUSE Linux Micro 6.1 kubevirt-virtctl-1.3.1-slfo.1.1_1.3 as a component of SUSE Linux Micro 6.1 kubevirt-container-disk-1.1.1-150500.8.18.1 as a component of openSUSE Leap 15.5 kubevirt-manifests-1.1.1-150500.8.18.1 as a component of openSUSE Leap 15.5 kubevirt-tests-1.1.1-150500.8.18.1 as a component of openSUSE Leap 15.5 kubevirt-virt-api-1.1.1-150500.8.18.1 as a component of openSUSE Leap 15.5 kubevirt-virt-controller-1.1.1-150500.8.18.1 as a component of openSUSE Leap 15.5 kubevirt-virt-exportproxy-1.1.1-150500.8.18.1 as a component of openSUSE Leap 15.5 kubevirt-virt-exportserver-1.1.1-150500.8.18.1 as a component of openSUSE Leap 15.5 kubevirt-virt-handler-1.1.1-150500.8.18.1 as a component of openSUSE Leap 15.5 kubevirt-virt-launcher-1.1.1-150500.8.18.1 as a component of openSUSE Leap 15.5 kubevirt-virt-operator-1.1.1-150500.8.18.1 as a component of openSUSE Leap 15.5 kubevirt-virtctl-1.1.1-150500.8.18.1 as a component of openSUSE Leap 15.5 obs-service-kubevirt_containers_meta-1.1.1-150500.8.18.1 as a component of openSUSE Leap 15.5 kubevirt-container-disk-1.1.1-150600.5.3.2 as a component of openSUSE Leap 15.6 kubevirt-manifests-1.1.1-150600.5.3.2 as a component of openSUSE Leap 15.6 kubevirt-pr-helper-conf-1.1.1-150600.5.3.2 as a component of openSUSE Leap 15.6 kubevirt-tests-1.1.1-150600.5.3.2 as a component of openSUSE Leap 15.6 kubevirt-virt-api-1.1.1-150600.5.3.2 as a component of openSUSE Leap 15.6 kubevirt-virt-controller-1.1.1-150600.5.3.2 as a component of openSUSE Leap 15.6 kubevirt-virt-exportproxy-1.1.1-150600.5.3.2 as a component of openSUSE Leap 15.6 kubevirt-virt-exportserver-1.1.1-150600.5.3.2 as a component of openSUSE Leap 15.6 kubevirt-virt-handler-1.1.1-150600.5.3.2 as a component of openSUSE Leap 15.6 kubevirt-virt-launcher-1.1.1-150600.5.3.2 as a component of openSUSE Leap 15.6 kubevirt-virt-operator-1.1.1-150600.5.3.2 as a component of openSUSE Leap 15.6 kubevirt-virtctl-1.1.1-150600.5.3.2 as a component of openSUSE Leap 15.6 obs-service-kubevirt_containers_meta-1.1.1-150600.5.3.2 as a component of openSUSE Leap 15.6 kubevirt-manifests-1.1.1-150500.8.18.1 as a component of openSUSE Leap Micro 5.5 kubevirt-virtctl-1.1.1-150500.8.18.1 as a component of openSUSE Leap Micro 5.5 kubevirt-container-disk-1.2.2-2.1 as a component of openSUSE Tumbleweed kubevirt-manifests-1.2.2-2.1 as a component of openSUSE Tumbleweed kubevirt-pr-helper-conf-1.2.2-2.1 as a component of openSUSE Tumbleweed kubevirt-tests-1.2.2-2.1 as a component of openSUSE Tumbleweed kubevirt-virt-api-1.2.2-2.1 as a component of openSUSE Tumbleweed kubevirt-virt-controller-1.2.2-2.1 as a component of openSUSE Tumbleweed kubevirt-virt-exportproxy-1.2.2-2.1 as a component of openSUSE Tumbleweed kubevirt-virt-exportserver-1.2.2-2.1 as a component of openSUSE Tumbleweed kubevirt-virt-handler-1.2.2-2.1 as a component of openSUSE Tumbleweed kubevirt-virt-launcher-1.2.2-2.1 as a component of openSUSE Tumbleweed kubevirt-virt-operator-1.2.2-2.1 as a component of openSUSE Tumbleweed kubevirt-virtctl-1.2.2-2.1 as a component of openSUSE Tumbleweed obs-service-kubevirt_containers_meta-1.2.2-2.1 as a component of openSUSE Tumbleweed kubevirt-manifests as a component of SUSE Linux Enterprise Module for Containers 15 SP7 kubevirt-virtctl as a component of SUSE Linux Enterprise Module for Containers 15 SP7 kubevirt as a component of SUSE Linux Enterprise Module for Containers 15 SP7 An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component. CVE-2024-33394 SUSE Linux Enterprise Micro 5.5:kubevirt-manifests-1.1.1-150500.8.18.1 SUSE Linux Enterprise Micro 5.5:kubevirt-virtctl-1.1.1-150500.8.18.1 SUSE Linux Enterprise Module for Containers 15 SP5:kubevirt-manifests-1.1.1-150500.8.18.1 SUSE Linux Enterprise Module for Containers 15 SP5:kubevirt-virtctl-1.1.1-150500.8.18.1 SUSE Linux Enterprise Module for Containers 15 SP6:kubevirt-manifests-1.1.1-150600.5.3.2 SUSE Linux Enterprise Module for Containers 15 SP6:kubevirt-virtctl-1.1.1-150600.5.3.2 SUSE Linux Enterprise Module for Containers 15 SP7:kubevirt-manifests-1.5.0-150700.1.3 SUSE Linux Enterprise Module for Containers 15 SP7:kubevirt-virtctl-1.5.0-150700.1.3 SUSE Linux Enterprise Server 16.0:kubevirt-virtctl-1.5.2-160000.1.2 SUSE Linux Micro 6.1:kubevirt-manifests-1.3.1-slfo.1.1_1.3 SUSE Linux Micro 6.1:kubevirt-virtctl-1.3.1-slfo.1.1_1.3 openSUSE Leap 15.5:kubevirt-container-disk-1.1.1-150500.8.18.1 openSUSE Leap 15.5:kubevirt-manifests-1.1.1-150500.8.18.1 openSUSE Leap 15.5:kubevirt-tests-1.1.1-150500.8.18.1 openSUSE Leap 15.5:kubevirt-virt-api-1.1.1-150500.8.18.1 openSUSE Leap 15.5:kubevirt-virt-controller-1.1.1-150500.8.18.1 openSUSE Leap 15.5:kubevirt-virt-exportproxy-1.1.1-150500.8.18.1 openSUSE Leap 15.5:kubevirt-virt-exportserver-1.1.1-150500.8.18.1 openSUSE Leap 15.5:kubevirt-virt-handler-1.1.1-150500.8.18.1 openSUSE Leap 15.5:kubevirt-virt-launcher-1.1.1-150500.8.18.1 openSUSE Leap 15.5:kubevirt-virt-operator-1.1.1-150500.8.18.1 openSUSE Leap 15.5:kubevirt-virtctl-1.1.1-150500.8.18.1 openSUSE Leap 15.5:obs-service-kubevirt_containers_meta-1.1.1-150500.8.18.1 openSUSE Leap 15.6:kubevirt-container-disk-1.1.1-150600.5.3.2 openSUSE Leap 15.6:kubevirt-manifests-1.1.1-150600.5.3.2 openSUSE Leap 15.6:kubevirt-pr-helper-conf-1.1.1-150600.5.3.2 openSUSE Leap 15.6:kubevirt-tests-1.1.1-150600.5.3.2 openSUSE Leap 15.6:kubevirt-virt-api-1.1.1-150600.5.3.2 openSUSE Leap 15.6:kubevirt-virt-controller-1.1.1-150600.5.3.2 openSUSE Leap 15.6:kubevirt-virt-exportproxy-1.1.1-150600.5.3.2 openSUSE Leap 15.6:kubevirt-virt-exportserver-1.1.1-150600.5.3.2 openSUSE Leap 15.6:kubevirt-virt-handler-1.1.1-150600.5.3.2 openSUSE Leap 15.6:kubevirt-virt-launcher-1.1.1-150600.5.3.2 openSUSE Leap 15.6:kubevirt-virt-operator-1.1.1-150600.5.3.2 openSUSE Leap 15.6:kubevirt-virtctl-1.1.1-150600.5.3.2 openSUSE Leap 15.6:obs-service-kubevirt_containers_meta-1.1.1-150600.5.3.2 openSUSE Leap Micro 5.5:kubevirt-manifests-1.1.1-150500.8.18.1 openSUSE Leap Micro 5.5:kubevirt-virtctl-1.1.1-150500.8.18.1 openSUSE Tumbleweed:kubevirt-container-disk-1.2.2-2.1 openSUSE Tumbleweed:kubevirt-manifests-1.2.2-2.1 openSUSE Tumbleweed:kubevirt-pr-helper-conf-1.2.2-2.1 openSUSE Tumbleweed:kubevirt-tests-1.2.2-2.1 openSUSE Tumbleweed:kubevirt-virt-api-1.2.2-2.1 openSUSE Tumbleweed:kubevirt-virt-controller-1.2.2-2.1 openSUSE Tumbleweed:kubevirt-virt-exportproxy-1.2.2-2.1 openSUSE Tumbleweed:kubevirt-virt-exportserver-1.2.2-2.1 openSUSE Tumbleweed:kubevirt-virt-handler-1.2.2-2.1 openSUSE Tumbleweed:kubevirt-virt-launcher-1.2.2-2.1 openSUSE Tumbleweed:kubevirt-virt-operator-1.2.2-2.1 openSUSE Tumbleweed:kubevirt-virtctl-1.2.2-2.1 openSUSE Tumbleweed:obs-service-kubevirt_containers_meta-1.2.2-2.1 SUSE Linux Enterprise Module for Containers 15 SP7:kubevirt SUSE Linux Enterprise Module for Containers 15 SP7:kubevirt-manifests SUSE Linux Enterprise Module for Containers 15 SP7:kubevirt-virtctl moderate 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N