tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...

RHEL 8 : tuned (RHSA-2025:0327)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0327 advisory. The tuned packages provide a service that tunes system settings according to a selected profile. Security Fixes: tuned: improper sanitization of...

Advisory ROSA-SA-2025-2561

Software: tuned 2.11.0 OS: rosa-server79 packageevrstring: tuned-2.11.0-12.0.1.res7 CVE-ID: CVE-2024-52337 BDU-ID: 2024-10906 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the instancecreate method of the tuned system device monitoring and adaptive tuning program is related to insufficient input...

RHSA-2025:0195 Red Hat Security Advisory: tuned security update

Bulletin has no description...

tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...

Moderate: Red Hat Security Advisory: tuned security update

An update for tuned is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

RHEL 8 : tuned (RHSA-2025:0195)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0195 advisory. The tuned packages provide a service that tunes system settings according to a selected profile. Security Fixes: tuned: improper sanitization of...

CVE-2024-52336 affecting package tuned for versions less than 2.21.0-2

CVE-2024-52336 affecting package tuned for versions less than 2.21.0-2. A patched version of the package is available...

CVE-2024-52337 affecting package tuned for versions less than 2.21.0-2

CVE-2024-52337 affecting package tuned for versions less than 2.21.0-2. A patched version of the package is available...

CBL Mariner 2.0 Security Update: tuned (CVE-2024-52337)

The version of tuned installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52337 advisory. - A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This...

CBL Mariner 2.0 Security Update: tuned (CVE-2024-52336)

The version of tuned installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52336 advisory. - A script injection vulnerability was identified in the Tuned package. The instancecreate D-Bus function can b...

OPENSUSE-SU-2024:14605-1 tuned-2.24.1.0+git.90c24ee-1.1 on GA media

These are all security issues fixed in the tuned-2.24.1.0+git.90c24ee-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-52336 affecting package tuned for versions less than 2.15.0-5

CVE-2024-52336 affecting package tuned for versions less than 2.15.0-5. A patched version of the package is available...

CVE-2024-52337 affecting package tuned for versions less than 2.15.0-5

CVE-2024-52337 affecting package tuned for versions less than 2.15.0-5. A patched version of the package is available...

RHSA-2024:11161 Red Hat Security Advisory: tuned security update

Bulletin has no description...

AlmaLinux 8 : tuned (ALSA-2024:11161)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:11161 advisory. tuned: improper sanitization of instancename parameter of the instancecreate method CVE-2024-52337 Tenable has extracted the preceding description block directly...

RHEL 8 : tuned (RHSA-2024:11161)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:11161 advisory. The tuned packages provide a service that tunes system settings according to a selected profile. Security Fixes: tuned: improper sanitization of...

tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...

Moderate: Red Hat Security Advisory: tuned security update

An update for tuned is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

ALSA-2024:11161 Moderate: tuned security update

The tuned packages provide a service that tunes system settings according to a selected profile. Security Fixes: tuned: improper sanitization of instancename parameter of the instancecreate method CVE-2024-52337 For more details about the security issues, including the impact, a CVSS score,...