CVE-2017-15119 MEDIUM

CVE-2017-15119

Vendor Qemu
Product qemu
Weakness CWE-400
Published July 27, 2018
Last update August 5, 2024
View on NVD All CVEs

CVSS base score

5.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

What the vulnerability does

01Description

The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other requests, resulting in DoS.

Key dates

02Disclosure timeline

July 27, 2018 CVE published
August 5, 2024 Record updated