The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows remote attackers to cause a denial of service (segmentation fault and server crash) by leveraging failure to ensure that all initialization occurs before talking to a client in the nbd_negotiate function.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-common | Jul 6, 2017 | Jul 5, 2017 |
| Debian | — | Upgrade qemu | Dec 5, 2017 | Jul 5, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Nov 30, 2017 | Jul 6, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Nov 30, 2017 | Jul 6, 2017 |
| Oracle_linux | — | Upgrade qemu-system-x86Upgrade qemu-block-glusterUpgrade qemu-commonUpgrade qemu-kvm-commonUpgrade ivshmem-toolsUpgrade qemuUpgrade qemu-system-aarch64Upgrade qemu-system-aarch64-coreUpgrade qemu-block-rbdUpgrade qemu-kvm-toolsUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-block-iscsiUpgrade qemu-kvmUpgrade qemu-system-x86-core | Jul 5, 2017 | May 26, 2017 |
| Redhat_linux | — | Upgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-kvm | Jul 5, 2017 | Jul 5, 2017 |
| Suse | — | Upgrade qemu-audio-spiceUpgrade qemu-vgabiosUpgrade qemu-ui-cursesUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-gtkUpgrade qemu-kvmUpgrade qemu-s390xUpgrade qemu-s390Upgrade qemu-ksmUpgrade qemu-block-sshUpgrade qemu-ui-spice-coreUpgrade qemu-ui-spice-appUpgrade qemu-seabiosUpgrade qemu-langUpgrade qemu-block-curlUpgrade qemu-skibootUpgrade qemu-microvmUpgrade qemu-audio-alsaUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade qemu-ui-openglUpgrade qemu-x86Upgrade qemu-chardev-spiceUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-armUpgrade qemu-sgabiosUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-ossUpgrade qemu-hw-display-qxlUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-paUpgrade qemu-toolsUpgrade qemuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ipxe | Jul 21, 2017 | Jul 5, 2017 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-ppc | Sep 13, 2017 | Jul 5, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub