This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2017-9524 →

DEBIAN-CVE-2017-9524

The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows remote attackers to cause a de...

Original description

The description as published by the source.

The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows remote attackers to cause a denial of service (segmentation fault and server crash) by leveraging failure to ensure that all initialization occurs before talking to a client in the nbd_negotiate function.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 qemu

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.8+dfsg-7"}]}]

Debian:13 qemu

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.8+dfsg-7"}]}]

Debian:14 qemu

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.8+dfsg-7"}]}]

References

advisory security-tracker.debian.org