Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:18272
HistoryMay 02, 2019 - 6:36 a.m.

Buffer Overflow

2019-05-0206:36:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.002 Low

EPSS

Percentile

54.8%

QEMU is vulnerable to buffer overflow attacks. This occurs while processing server’s response to a ‘NBD_OPT_LIST’ request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the QEMU process.

References