CVE-2024-7409

2024-08-0514:15:35

Debian Security Bug Tracker

security-tracker.debian.org

qemu

nbd server

unix

cve-2024-7409

flaw

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

9.4%

JSON

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.

OSVersionArchitecturePackageVersionFilename
Debian12allqemu<= 1:7.2+dfsg-7+deb12u7qemu_1:7.2+dfsg-7+deb12u7_all.deb
Debian11allqemu<= 1:5.2+dfsg-11+deb11u3qemu_1:5.2+dfsg-11+deb11u3_all.deb
Debian999allqemu< 1:9.0.2+ds-3qemu_1:9.0.2+ds-3_all.deb
Debian13allqemu<= 1:9.0.2+ds-2qemu_1:9.0.2+ds-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	qemu	<= 1:7.2+dfsg-7+deb12u7	qemu_1:7.2+dfsg-7+deb12u7_all.deb
Debian	11	all	qemu	<= 1:5.2+dfsg-11+deb11u3	qemu_1:5.2+dfsg-11+deb11u3_all.deb
Debian	999	all	qemu	< 1:9.0.2+ds-3	qemu_1:9.0.2+ds-3_all.deb
Debian	13	all	qemu	<= 1:9.0.2+ds-2	qemu_1:9.0.2+ds-2_all.deb