CVE-2017-15118
High
Description
A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.
SeverityHigh
CVSS8.3
Exploit probability—
Product
Qemu
PublishedJul 27, 2018
First seenJul 27, 2018
Weakness typeCWE-121CWE-121
How to fix
Update
- qemu qemu2.11 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qemu qemu | v < 2.11 | 2.11 |
| canonical ubuntu_linux | 14.04, 16.04, 17.10 | — |
| redhat enterprise_linux | 7.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.