VDB
CVE-2017-9524
CVE-2017-9524
PUBLISHED
Es existiert eine "null pointer dereference" Schwachstelle in QEMU, wenn der Emulator mit "Network Block Device(NBD) Server" Unterstützung kompiliert wurde. Dieser Fehler tritt auf, wenn ein Client aufgrund fehlgeschlagener Negotiation nicht initialisiert wurde. Ein Angreifer aus einem Gast System kann so einen Denial of Service des qemu-nbd Servers verursachen.
EPSS 2.08% · 84.3th percentile
Risk Scores
EPSS Score
2.08%
84.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu | Ubuntu Linux | |
| Open Source | Open Source QEMU | |
| Red Hat | Red Hat Enterprise Linux | |
| Oracle | Oracle Linux | |
| SUSE | SUSE Linux | |
| Debian | Debian Linux |
Timeline
- Jun 11, 2017 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Jan 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 11, 2023 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2017/wid-sec-w-2024-2022.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-2022 advisory
- http://seclists.org/oss-sec/2017/q2/454 advisory
- https://access.redhat.com/errata/RHSA-2017:1682 advisory
- https://access.redhat.com/errata/RHSA-2017:1681 advisory
- http://linux.oracle.com/errata/ELSA-2017-1681.html advisory
- https://lists.debian.org/debian-security-announce/2017/msg00182.html advisory
- https://access.redhat.com/errata/RHSA-2017:2408 advisory
- https://www.debian.org/security/2017/dsa-3925 advisory
- http://www.ubuntu.com/usn/usn-3414-1/ advisory
- https://www.suse.com/support/update/announcement/2017/suse-su-20172936-1.html advisory
- http://linux.oracle.com/errata/ELSA-2019-4713.html advisory
- https://linux.oracle.com/errata/ELSA-2024-12604.html advisory
- https://linux.oracle.com/errata/ELSA-2024-12605.html advisory