CVE-2017-7539
Fixed in a distro release EPSS 5%CVSS 5.3
An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD) server's initial connection negotiation, where the I/O coroutine was undefined. This could crash the qemu-nbd server if a client sent unexpected data during connection negotiation. A remote user or process could use this flaw to crash the qemu-nbd server resulting in denial of service.
Products: qemu
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 7 | qemu-img-rhev | 10:2.9.0-16.el7_4.5 |
| Red Hat Enterprise Linux 7 | qemu-kvm-common-rhev | 10:2.9.0-16.el7_4.5 |
| Red Hat Enterprise Linux 7 | qemu-kvm-rhev | 10:2.9.0-16.el7_4.5 |
| Red Hat Enterprise Linux 7 | qemu-kvm-rhev-debuginfo | 10:2.9.0-16.el7_4.5 |
| Red Hat Enterprise Linux 7 | qemu-kvm-tools-rhev | 10:2.9.0-16.el7_4.5 |
| Red Hat openstack 10 | qemu-img-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 10 | qemu-kvm-common-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 10 | qemu-kvm-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 10 | qemu-kvm-rhev-debuginfo | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 10 | qemu-kvm-tools-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 11 | qemu-img-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 11 | qemu-kvm-common-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 11 | qemu-kvm-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 11 | qemu-kvm-rhev-debuginfo | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 11 | qemu-kvm-tools-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 6 | qemu-img-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 6 | qemu-kvm-common-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 6 | qemu-kvm-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 6 | qemu-kvm-rhev-debuginfo | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 6 | qemu-kvm-tools-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 7 | qemu-img-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 7 | qemu-kvm-common-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 7 | qemu-kvm-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 7 | qemu-kvm-rhev-debuginfo | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 7 | qemu-kvm-tools-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 8 | qemu-img-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 8 | qemu-kvm-common-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 8 | qemu-kvm-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 8 | qemu-kvm-rhev-debuginfo | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 8 | qemu-kvm-tools-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 9 | qemu-img-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 9 | qemu-kvm-common-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 9 | qemu-kvm-rhev | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 9 | qemu-kvm-rhev-debuginfo | 10:2.9.0-16.el7_4.11 |
| Red Hat openstack 9 | qemu-kvm-tools-rhev | 10:2.9.0-16.el7_4.11 |