Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-7409
HistoryAug 05, 2024 - 12:00 a.m.

CVE-2024-7409

2024-08-0500:00:00
ubuntu.com
ubuntu.com
1
qemu
nbd server
dos attack
socket closure
improper synchronization
denial of service

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

Low

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial
of service (DoS) attack via improper synchronization during socket closure
when a client keeps a socket open as the server is taken offline.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

Low