A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw could occur while processing server's response to a 'NBD_OPT_LIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the QEMU process.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Jul 27, 2018 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Apr 10, 2017 |
| Oracle_linux | — | Upgrade qemu-system-aarch64-coreUpgrade qemu-system-x86Upgrade qemu-kvm-coreUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemu-imgUpgrade qemu-block-glusterUpgrade qemuUpgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemu-system-aarch64Upgrade qemu-system-x86-coreUpgrade qemu-common | Oct 30, 2018 | Feb 3, 2017 |
| Suse | — | Upgrade qemu-chardev-spiceUpgrade qemu-ui-spice-appUpgrade qemu-audio-ossUpgrade qemu-hw-display-qxlUpgrade qemu-sgabiosUpgrade qemu-langUpgrade qemu-ui-openglUpgrade qemu-guest-agentUpgrade qemu-skibootUpgrade qemu-audio-paUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-vgaUpgrade qemuUpgrade qemu-armUpgrade qemu-ui-gtkUpgrade qemu-s390xUpgrade qemu-vgabiosUpgrade qemu-microvmUpgrade qemu-hw-usb-redirectUpgrade qemu-x86Upgrade qemu-seabiosUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-s390Upgrade qemu-audio-spiceUpgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-ksmUpgrade qemu-chardev-baumUpgrade qemu-ipxeUpgrade qemu-block-sshUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-spice-coreUpgrade qemu-kvm | Jul 21, 2017 | Jul 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub