ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2017-15119

—
CVSS 3.0
8.6 high
EPSS
3%p88
Published
()
Modified
Description

The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other requests, resulting in DoS.

Vendors
qemuredhatcanonicaldebian
Products
qemu, virtualization, ubuntu linux, debian linux
Weakness
CWE-400
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (3.3%)

In the news

No ingested article mentions this CVE yet.