CVE-2017-2630: Buffer Overflow
A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw could occur while processing server's response to a 'NBDOPTLIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the QEMU process.
Other sources
A stack buffer overflow flaw was found in the Quick Emulator (QEMU) built with the Network Block Device (NBD) client support. The flaw could occur while processing server's response to a 'NBDOPTLIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the QEMU process.
Quick Emulator(Qemu) built with the Network Block Device(NBD) client support is vulnerable to a stack buffer overflow issue. It could occur while processing server's response to a 'NBDOPTLIST' request.
A malicious NBD server could use this issue to crash remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the Qemu process.
Upstream patch: --------------- -> https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg01246.html
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/02/15/2
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2630?
CVE-2017-2630 is rated as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2017-2630?
To fix CVE-2017-2630, upgrade affected QEMU versions to 2.9 or later or apply the appropriate patches provided by your vendor.
Which software is affected by CVE-2017-2630?
CVE-2017-2630 affects QEMU packages, specifically versions prior to 2.9, including qemu-kvm-rhev on Red Hat platforms.
Can CVE-2017-2630 lead to denial of service attacks?
Yes, CVE-2017-2630 can lead to denial of service attacks by crashing the remote NBD client.
Is there a public exploit for CVE-2017-2630?
Although there are discussions of the vulnerability, as of now, no public exploit details have been widely disclosed.