{"id":"CVE-2024-52337","title":"A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments","summary":"A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil'…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-20"],"published":"2024-11-26","updated":"2026-06-26","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-52337","references":[{"url":"https://access.redhat.com/errata/RHSA-2024:10381","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:10384","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:11161","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:0195","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:0327","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:0368","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:0879","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:0880","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:0881","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:1785","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:1802","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2024-52337","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2324541","label":"secalert@redhat.com"},{"url":"https://github.com/redhat-performance/tuned/releases/tag/v2.24.1","label":"secalert@redhat.com"},{"url":"https://security.opensuse.org/2024/11/26/tuned-instance-create.html","label":"secalert@redhat.com"},{"url":"https://www.openwall.com/lists/oss-security/2024/11/28/1","label":"secalert@redhat.com"},{"url":"https://security.opensuse.org/2024/11/26/tuned-instance-create.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openwall.com/lists/oss-security/2024/11/28/2","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.003,"epssPercentile":0.20307,"ingestedAt":"2026-06-26T16:43:13.399Z","slug":"CVE-2024-52337","body":"## Overview\n\nA log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick the administrator. The quotes '' are usually used in TuneD logs citing raw user input, so there will always be the ' character ending the spoofed input, and the administrator can easily overlook this. This logged string is later used in logging and in the output of utilities, for example, `tuned-adm get_instances` or other third-party programs that use Tuned's D-Bus interface for such operations.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}