---
id: CVE-2024-52337
title: >-
  A log spoofing flaw was found in the Tuned package due to improper
  sanitization of some API arguments
summary: >-
  A log spoofing flaw was found in the Tuned package due to improper
  sanitization of some API arguments. This flaw allows an attacker to pass a
  controlled sequence of characters; newlines can be inserted into the log.
  Instead of the 'evil'…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N'
cwe:
  - CWE-20
published: '2024-11-26'
updated: '2026-06-26'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-52337'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2024:10381'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2024:10384'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2024:11161'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:0195'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:0327'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:0368'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:0879'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:0880'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:0881'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:1785'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:1802'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/security/cve/CVE-2024-52337'
    label: secalert@redhat.com
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2324541'
    label: secalert@redhat.com
  - url: 'https://github.com/redhat-performance/tuned/releases/tag/v2.24.1'
    label: secalert@redhat.com
  - url: 'https://security.opensuse.org/2024/11/26/tuned-instance-create.html'
    label: secalert@redhat.com
  - url: 'https://www.openwall.com/lists/oss-security/2024/11/28/1'
    label: secalert@redhat.com
  - url: 'https://security.opensuse.org/2024/11/26/tuned-instance-create.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://www.openwall.com/lists/oss-security/2024/11/28/2'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.003
epssPercentile: 0.20307
ingestedAt: '2026-06-26T16:43:13.399Z'
---

## Overview

A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick the administrator. The quotes '' are usually used in TuneD logs citing raw user input, so there will always be the ' character ending the spoofed input, and the administrator can easily overlook this. This logged string is later used in logging and in the output of utilities, for example, `tuned-adm get_instances` or other third-party programs that use Tuned's D-Bus interface for such operations.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.