qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-debuginfo | Aug 28, 2019 | Aug 2, 2017 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Jul 27, 2017 | Jul 25, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Nov 30, 2017 | Aug 2, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Nov 30, 2017 | Aug 2, 2017 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Aug 10, 2017 | Jun 11, 2017 |
| Redhat_linux | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-common | Aug 9, 2017 | Jul 25, 2017 |
| Suse | — | Upgrade qemu-ui-spice-coreUpgrade xen-toolsUpgrade qemu-chardev-baumUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-qxlUpgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-libs-32bitUpgrade qemu-guest-agentUpgrade xen-doc-pdfUpgrade qemu-langUpgrade qemu-s390xUpgrade qemuUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-appUpgrade qemu-block-curlUpgrade qemu-ppcUpgrade qemu-block-sshUpgrade xen-develUpgrade qemu-audio-alsaUpgrade qemu-ksmUpgrade qemu-ui-gtkUpgrade qemu-toolsUpgrade xen-libsUpgrade qemu-chardev-spiceUpgrade qemu-block-rbdUpgrade qemu-audio-spiceUpgrade qemu-ipxeUpgrade qemu-ui-openglUpgrade xen-kmp-paeUpgrade qemu-seabiosUpgrade qemu-s390Upgrade xenUpgrade qemu-ui-cursesUpgrade qemu-audio-ossUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu-armUpgrade xen-doc-htmlUpgrade qemu-microvmUpgrade qemu-audio-paUpgrade kvmUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpuUpgrade xen-kmp-defaultUpgrade qemu-skibootUpgrade xen-tools-domUUpgrade qemu-sgabios | Sep 1, 2017 | Jul 25, 2017 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-system-arm | Sep 13, 2017 | Jul 25, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub