qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-tools | Aug 28, 2019 | Aug 2, 2017 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Jul 27, 2017 | Jul 25, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Nov 30, 2017 | Aug 2, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Nov 30, 2017 | Aug 2, 2017 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Aug 10, 2017 | Jun 11, 2017 |
| Redhat_linux | — | Upgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-img | Aug 9, 2017 | Jul 25, 2017 |
| Suse | — | Upgrade qemu-chardev-spiceUpgrade qemu-audio-alsaUpgrade qemu-block-curlUpgrade xen-kmp-paeUpgrade xen-develUpgrade qemu-hw-usb-redirectUpgrade qemu-s390xUpgrade qemu-block-sshUpgrade qemu-ui-spice-appUpgrade xen-libsUpgrade qemu-audio-spiceUpgrade qemu-ksmUpgrade qemu-hw-display-qxlUpgrade xen-doc-pdfUpgrade qemu-ui-gtkUpgrade qemu-ipxeUpgrade qemu-langUpgrade qemu-ui-spice-coreUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-toolsUpgrade qemu-chardev-baumUpgrade qemu-block-iscsiUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-libs-32bitUpgrade qemu-toolsUpgrade qemu-ppcUpgrade qemuUpgrade qemu-ui-openglUpgrade qemu-armUpgrade xen-tools-domUUpgrade qemu-audio-paUpgrade qemu-microvmUpgrade xen-doc-htmlUpgrade kvmUpgrade qemu-kvmUpgrade qemu-ui-cursesUpgrade qemu-audio-ossUpgrade qemu-x86Upgrade qemu-hw-display-virtio-vgaUpgrade qemu-seabiosUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-skibootUpgrade qemu-sgabiosUpgrade xenUpgrade qemu-vgabiosUpgrade qemu-s390 | Sep 1, 2017 | Jul 25, 2017 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-arm | Sep 13, 2017 | Jul 25, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub