NetSight
IP …
high7.5

CVE-2017-10664

qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting durin…

Impact

qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.

Affected products

VendorProductAffected versions
QemuQemu
through 2.9.1
DebianDebian Linux
Versions 8.0, 9.0
RedhatVirtualization
Versions 3.0, 4.0
RedhatOpenstack
Versions 6.0, 7.0, 8, 9, 10, 11
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Eus
Versions 7.4, 7.5, 7.6, 7.7
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 7.4, 7.6, 7.7
RedhatEnterprise Linux Server Tus
Versions 7.4, 7.6, 7.7
RedhatEnterprise Linux Workstation
Version 7.0

References