CVE Vulnerabilities

CVE-2017-10664

Published: Aug 02, 2017 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
5 MODERATE
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V3
5.3 MODERATE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Ubuntu
LOW

qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.

Affected Software

Name Vendor Start Version End Version
Qemu Qemu * 2.9.1 (including)
Red Hat Enterprise Linux 7 RedHat qemu-kvm-10:1.5.3-141.el7_4.1 *
Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 RedHat qemu-kvm-rhev-10:2.9.0-16.el7_4.11 *
Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 RedHat qemu-kvm-rhev-10:2.9.0-16.el7_4.11 *
Red Hat OpenStack Platform 10.0 (Newton) RedHat qemu-kvm-rhev-10:2.9.0-16.el7_4.11 *
Red Hat OpenStack Platform 11.0 (Ocata) RedHat qemu-kvm-rhev-10:2.9.0-16.el7_4.11 *
Red Hat OpenStack Platform 8.0 (Liberty) RedHat qemu-kvm-rhev-10:2.9.0-16.el7_4.11 *
Red Hat OpenStack Platform 9.0 (Mitaka) RedHat qemu-kvm-rhev-10:2.9.0-16.el7_4.11 *
Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 RedHat qemu-kvm-rhev-10:2.9.0-16.el7_4.3 *
RHEV 3.X Hypervisor and Agents for RHEL-7 RedHat qemu-kvm-rhev-10:2.9.0-16.el7_4.3 *
Qemu Ubuntu trusty *
Qemu Ubuntu xenial *
Qemu Ubuntu yakkety *
Qemu Ubuntu zesty *
Qemu-kvm Ubuntu precise/esm *

References