AZL-53546 CVE-2024-52337 affecting package tuned for versions less than 2.21.0-2

🗓️ 26 Nov 2024 16:15:17Reported by GoogleType

osv🔗 osv.dev👁 8 Views

Tuned log spoofing flaw before 2.21.0-2 allows crafted log lines via unsanitized inputs.

Reporter	Title	Published	Views	Family All 103
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture includes components with a known vulnerability (CVE-2024-52337)	21 May 202509:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Defender: Data Protect vulnerabilities resolved in release Defender 2.0.14/Data Protect 7.2.2_u1	23 Jun 202517:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	15 Apr 202502:36	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0279: tuned (ALINUX3-SA-2024:0279)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : tuned (ALSA-2024:11161)	18 Dec 202400:00	–	nessus
Tenable Nessus	CentOS 9 : tuned-2.24.0-2.el9	5 Dec 202400:00	–	nessus
Tenable Nessus	Fedora 40 : tuned (2024-0cab161b46)	5 Dec 202400:00	–	nessus
Tenable Nessus	Fedora 41 : tuned (2024-e457d67157)	29 Nov 202400:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: tuned (CVE-2024-52337)	19 Dec 202400:00	–	nessus
Tenable Nessus	MiracleLinux 9 : tuned-2.24.0-2.el9_5.ML.1 (AXSA:2024-9446:06)	20 Jan 202600:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-52337

18 Sep 2026 05:37Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.15.5

EPSS0.003

SSVC

Tuned package Log spoofing Unsanitized inputs CVE 2024 52337