CVE-2017-15119
Medium
Description
The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other requests, resulting in DoS.
SeverityMedium
CVSS5.8
Exploit probability—
Product
Qemu
PublishedJul 27, 2018
First seenJul 27, 2018
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Update
- qemu qemu2.11.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qemu qemu | v < 2.11.0 | 2.11.0 |
| redhat virtualization | 4.0 | — |
| canonical ubuntu_linux | 14.04, 16.04, 17.10 | — |
| debian debian_linux | 9.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.