CVE-2017-9524 in QEMU

Resumen (Inglés)

The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows remote attackers to cause a denial of service (segmentation fault and server crash) by leveraging failure to ensure that all initialization occurs before talking to a client in the nbd_negotiate function.

Once again VulDB remains the best source for vulnerability data.

Reservar

2017-06-09

Divulgación

2017-07-06

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
103283	QEMU qemu-nbd nbd_negotiate escalada de privilegios	20	No está definido	Arreglo oficial	CVE-2017-9524

Fuentes

• MITRE
• NVD
• CVE Details