Lucene search
+L

218 matches found

Mend
Mend
•added 2020/06/09 12:07 p.m.•4 views

CVE-2020-10761

An assertion failure issue was found in the Network Block DeviceNBD Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the...

5.3CVSS0.01796EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2020/06/09 5:24 a.m.•35 views

CVE-2020-10761

An assertion failure issue was found in the Network Block DeviceNBD Server of the QEMU. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the qemu-nbd server resulting ...

4CVSS3.7AI score0.01796EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/09 12:00 a.m.•6 views

CVE-2020-10761: Reachable Assertion

An assertion failure issue was found in the Network Block DeviceNBD Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the...

5CVSS5.7AI score0.01796EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/06/09 12:00 a.m.•1 views

PT-2020-6468

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 5.0.1 Description An assertion failure issue was found in the Network Block Device NBD Server. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request...

7.8CVSS0.02486EPSS
SaveExploits0References181
RedhatCVE
RedhatCVE
•added 2020/04/05 4:54 p.m.•37 views

CVE-2017-15119

The Network Block Device NBD server in Quick Emulator QEMU, is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other...

8.6CVSS1.9AI score0.03282EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•106 views

Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2017-1224)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.04028EPSS
SaveExploits0References2
Veracode
Veracode
•added 2019/05/16 2:53 a.m.•35 views

Denial Of Service (DoS)

QEMU is vulnerable to denial of service attacks. A remote unauthenticated attacker could send large option requests, making the server waste CPU time to keep the NBD server from serving other requests, resulting in denial of service conditions...

8.6CVSS8.6AI score0.03282EPSS
SaveExploits0References126Affected Software1
Tenable Nessus
Tenable Nessus
•added 2019/05/14 12:00 a.m.•49 views

EulerOS Virtualization 3.0.1.0 : qemu (EulerOS-SA-2019-1444)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An integer overflow issue was found in the NE200 NIC emulation. It could occur while receiving packets from the network, if the siz...

9CVSS6.4AI score0.25054EPSS
SaveExploits8References17
Veracode
Veracode
•added 2019/01/15 9:17 a.m.•81 views

Denial Of Service (DoS)

QEMU is vulnerable to denial of service. Quick Emulator QEMU built with Network Block Device NBD Server support was vulnerable to a null-pointer dereference issue. The flaw could occur when releasing a client, which was not initialized due to failed negotiation. A remote user or process could...

7.5CVSS7.2AI score0.04093EPSS
SaveExploits0References10Affected Software1
Prion
Prion
•added 2018/07/27 9:29 p.m.•21 views

Stack overflow

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requir...

7.5CVSS9.4AI score0.11931EPSS
SaveExploits4References7Affected Software3
OSV
OSV
•added 2018/07/27 9:29 p.m.•29 views

CVE-2017-15118

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requir...

9.8CVSS6.9AI score
SaveExploits0References7
NVD
NVD
•added 2018/07/27 9:29 p.m.•42 views

CVE-2017-15118

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requir...

9.8CVSS8.7AI score0.11931EPSS
SaveExploits4References7
Cvelist
Cvelist
•added 2018/07/27 9:00 p.m.•64 views

CVE-2017-15118

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requir...

8.3CVSS8.6AI score0.11931EPSS
SaveExploits4References7
Mend
Mend
•added 2018/07/27 9:00 p.m.•4 views

CVE-2017-15118

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requir...

9.8CVSS0.11931EPSS
SaveExploits4References10
Debian CVE
Debian CVE
•added 2018/07/27 9:00 p.m.•68 views

CVE-2017-15118

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requir...

9.8CVSS7.6AI score0.11931EPSS
SaveExploits4
Prion
Prion
•added 2018/07/27 4:29 p.m.•37 views

Denial of service

The Network Block Device NBD server in Quick Emulator QEMU before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from...

5CVSS8.7AI score0.03282EPSS
SaveExploits0References8Affected Software4
Cvelist
Cvelist
•added 2018/07/27 4:00 p.m.•45 views

CVE-2017-15119

The Network Block Device NBD server in Quick Emulator QEMU before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from...

5.8CVSS8.1AI score0.03282EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2018/07/27 4:00 p.m.•59 views

CVE-2017-15119

The Network Block Device NBD server in Quick Emulator QEMU before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from...

8.6CVSS7.3AI score0.03282EPSS
SaveExploits0
CVE
CVE
•added 2018/07/27 4:00 p.m.•158 views

CVE-2017-15119

CVE-2017-15119 affects the NBD server in Quick Emulator (QEMU). The NBD server can be DoSed if a client sends oversized option requests, causing the server to spend CPU time reading up to 4 GB per request and potentially starving other requests. This vulnerability is described as occurring in QEM...

8.6CVSS8.6AI score0.03282EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/27 12:00 a.m.•6 views

CVE-2017-15118: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requir...

9.8CVSS7.2AI score0.11931EPSS
SaveExploits4References3
Rows per page
Query Builder