Medium severity5.9NVD Advisory· Published May 2, 2024· Updated Jun 17, 2026
CVE-2024-33394
CVE-2024-33394
Description
An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
kubevirt.io/kubevirtGo | <= 1.2.0 | — |
Affected products
65- osv-coords63 versionspkg:rpm/opensuse/kubevirt&distro=openSUSE%20Tumbleweedpkg:golang/kubevirt.io/kubevirtpkg:apk/chainguard/virt-api-1.8pkg:rpm/opensuse/kubevirt1.8&distro=openSUSE%20Tumbleweedpkg:apk/chainguard/harvesterpkg:apk/chainguard/harvester-fipspkg:apk/chainguard/harvester-upgrade-helperpkg:apk/chainguard/harvester-webhookpkg:apk/chainguard/virt-api-1.6pkg:apk/chainguard/virt-api-1.7pkg:apk/chainguard/virt-api-fips-1.6pkg:apk/chainguard/virt-chroot-fips-1.7pkg:apk/chainguard/virt-chroot-fips-1.8pkg:apk/chainguard/virt-controller-1.6pkg:apk/chainguard/virt-controller-1.7pkg:apk/chainguard/virt-controller-1.8pkg:apk/chainguard/virt-controller-fips-1.6pkg:apk/chainguard/virt-controller-fips-1.7pkg:apk/chainguard/virt-controller-fips-1.8pkg:apk/chainguard/virt-handler-1.6pkg:apk/chainguard/virt-handler-1.7pkg:apk/chainguard/virt-handler-1.8pkg:apk/chainguard/virt-handler-fips-1.6pkg:apk/chainguard/virt-handler-fips-1.7pkg:apk/chainguard/virt-handler-fips-1.8pkg:apk/chainguard/virt-launcher-1.6pkg:apk/chainguard/virt-launcher-1.6-virt-freezerpkg:apk/chainguard/virt-launcher-1.6-virt-launcher-monitorpkg:apk/chainguard/virt-launcher-1.6-virt-probepkg:apk/chainguard/virt-launcher-1.6-virt-tailpkg:apk/chainguard/virt-launcher-1.7pkg:apk/chainguard/virt-launcher-1.7-virt-launcher-monitorpkg:apk/chainguard/virt-launcher-1.7-virt-probepkg:apk/chainguard/virt-launcher-1.7-virt-tailpkg:apk/chainguard/virt-launcher-1.8pkg:apk/chainguard/virt-launcher-1.8-virt-freezerpkg:apk/chainguard/virt-launcher-1.8-virt-tailpkg:apk/chainguard/virt-operator-1.6pkg:apk/chainguard/virt-operator-1.7pkg:apk/chainguard/virt-operator-1.8pkg:apk/chainguard/virt-operator-fips-1.6pkg:apk/chainguard/virt-operator-fips-1.7pkg:apk/wolfi/docker-machine-driver-harvesterpkg:apk/chainguard/docker-machine-driver-harvesterpkg:apk/chainguard/harvester-fips-upgrade-helperpkg:apk/chainguard/harvester-fips-webhookpkg:apk/chainguard/virt-api-fips-1.7pkg:apk/chainguard/virt-api-fips-1.8pkg:apk/chainguard/virt-chroot-1.6pkg:apk/chainguard/virt-chroot-1.7pkg:apk/chainguard/virt-chroot-1.8pkg:apk/chainguard/virt-chroot-fips-1.6pkg:apk/chainguard/virt-launcher-1.7-virt-freezerpkg:apk/chainguard/virt-launcher-1.8-libvirt-hook-clientpkg:apk/chainguard/virt-launcher-1.8-virt-launcher-monitorpkg:apk/chainguard/virt-launcher-1.8-virt-probepkg:apk/chainguard/virt-operator-fips-1.8pkg:rpm/suse/kubevirt&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/kubevirt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2015%20SP5pkg:rpm/opensuse/kubevirt&distro=openSUSE%20Leap%2015.5pkg:rpm/suse/kubevirt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2015%20SP6pkg:rpm/opensuse/kubevirt&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/kubevirt-1.8&distro=openSUSE%20Tumbleweed
< 1.2.2-2.1+ 62 more
- (no CPE)range: < 1.2.2-2.1
- (no CPE)range: <= 1.2.0
- (no CPE)range: < 0
- (no CPE)range: < 1.8.3-1.1
- (no CPE)range: < 1.8.1-r1
- (no CPE)range: < 1.8.1-r0
- (no CPE)range: < 1.8.1-r1
- (no CPE)range: < 1.8.1-r1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.6.6-r2
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.6.6-r3
- (no CPE)range: < 1.6.6-r3
- (no CPE)range: < 1.6.6-r3
- (no CPE)range: < 1.6.6-r3
- (no CPE)range: < 1.6.6-r3
- (no CPE)range: < 1.7.4-r2
- (no CPE)range: < 1.7.4-r2
- (no CPE)range: < 1.7.4-r2
- (no CPE)range: < 1.7.4-r2
- (no CPE)range: < 1.8.4-r0
- (no CPE)range: < 1.8.4-r0
- (no CPE)range: < 1.8.4-r0
- (no CPE)range: < 1.6.6-r1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.6.6-r2
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.8.1-r0
- (no CPE)range: < 1.8.1-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.7.4-r2
- (no CPE)range: < 1.8.4-r0
- (no CPE)range: < 1.8.4-r0
- (no CPE)range: < 1.8.4-r0
- (no CPE)range: < 0
- (no CPE)range: < 1.1.1-150500.8.18.1
- (no CPE)range: < 1.1.1-150500.8.18.1
- (no CPE)range: < 1.1.1-150500.8.18.1
- (no CPE)range: < 1.1.1-150600.5.3.2
- (no CPE)range: < 1.1.1-150600.5.3.2
- (no CPE)range: < 1.8.3-1.1
Patches
Vulnerability mechanics
References
3- gist.github.com/HouqiyuA/1b75e23ece7ad98490aec1c887bdf49bnvdThird Party AdvisoryWEB
- github.com/advisories/GHSA-4q63-mr2m-57hfghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-33394ghsaADVISORY
News mentions
0No linked articles in our index yet.