qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-kvm-tools | Aug 28, 2019 | Aug 2, 2017 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Jul 27, 2017 | Jul 25, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Nov 30, 2017 | Aug 2, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Nov 30, 2017 | Aug 2, 2017 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Aug 10, 2017 | Jun 11, 2017 |
| Redhat_linux | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfo | Aug 9, 2017 | Jul 25, 2017 |
| Suse | — | Upgrade xen-doc-htmlUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-s390Upgrade qemu-skibootUpgrade xen-tools-domUUpgrade qemu-kvmUpgrade kvmUpgrade qemu-vgabiosUpgrade qemu-ui-cursesUpgrade qemu-audio-ossUpgrade qemu-microvmUpgrade qemu-x86Upgrade qemu-seabiosUpgrade qemu-armUpgrade xenUpgrade qemu-sgabiosUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-chardev-spiceUpgrade xen-doc-pdfUpgrade qemuUpgrade qemu-s390xUpgrade qemu-ui-gtkUpgrade qemu-hw-display-qxlUpgrade qemu-audio-spiceUpgrade xen-develUpgrade qemu-toolsUpgrade qemu-block-rbdUpgrade xen-libsUpgrade qemu-ipxeUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-spice-coreUpgrade qemu-ksmUpgrade qemu-ppcUpgrade xen-toolsUpgrade qemu-ui-openglUpgrade qemu-block-curlUpgrade qemu-langUpgrade qemu-chardev-baumUpgrade qemu-audio-alsaUpgrade xen-kmp-paeUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-appUpgrade xen-libs-32bitUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-guest-agentUpgrade qemu-block-iscsiUpgrade qemu-block-ssh | Sep 1, 2017 | Jul 25, 2017 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-mipsUpgrade qemu-system-s390x | Sep 13, 2017 | Jul 25, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub