Denial Of Service (DoS)

2019-01-1509:17:45

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.04 Low

EPSS

Percentile

92.1%

JSON

QEMU is vulnerable to denial of service. Quick Emulator (QEMU) built with Network Block Device (NBD) Server support was vulnerable to a null-pointer dereference issue. The flaw could occur when releasing a client, which was not initialized due to failed negotiation. A remote user or process could exploit this flaw to crash the qemu-nbd server (denial of service).

CPENameOperatorVersion
qemu-kvm-rheveq2.6.0__28.el7_3.3
qemu-kvm-rheveq2.3.0__31.el7_2.16
qemu-kvm-rheveq2.3.0__31.el7_2.15
qemu-kvm-rheveq2.3.0__31.el7
qemu-kvm-rheveq2.6.0__28.el7_3.17
qemu-kvm-rheveq2.1.2__23.el7
qemu-kvm-rheveq2.1.2__23.el7_1.10
qemu-kvm-rheveq2.3.0__31.el7_2.19
qemu-kvm-rheveq2.3.0__31.el7_2.23
qemu-kvm-rheveq2.3.0__31.el7_2.21

Name	Operator	Version
qemu-kvm-rhev	eq	2.6.0__28.el7_3.3
qemu-kvm-rhev	eq	2.3.0__31.el7_2.16
qemu-kvm-rhev	eq	2.3.0__31.el7_2.15
qemu-kvm-rhev	eq	2.3.0__31.el7
qemu-kvm-rhev	eq	2.6.0__28.el7_3.17
qemu-kvm-rhev	eq	2.1.2__23.el7
qemu-kvm-rhev	eq	2.1.2__23.el7_1.10
qemu-kvm-rhev	eq	2.3.0__31.el7_2.19
qemu-kvm-rhev	eq	2.3.0__31.el7_2.23
qemu-kvm-rhev	eq	2.3.0__31.el7_2.21