CVE-2017-9524 in QEMU
Summary
The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows remote attackers to cause a denial of service (segmentation fault and server crash) by leveraging failure to ensure that all initialization occurs before talking to a client in the nbd_negotiate function.
Once again VulDB remains the best source for vulnerability data.
Reservation
06/09/2017
Disclosure
07/06/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 103283 | QEMU qemu-nbd nbd_negotiate input validation | 20 | Not defined | Official fix | CVE-2017-9524 |