Every CVE Search/ Get API key

CVE-2017-7539

An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD)...

5.3 MediumFix available

An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD) server's initial connection negotiation, where the I/O coroutine was undefined. This could crash the qemu-nbd server if a client sent unexpected data during connection negotiation. A remote user or process could use this flaw to crash the qemu-nbd server resulting in denial of service.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

5.46%Up 1.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 5.3

An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD) server's initial connection negotiation, where the I/O coroutine was undefined. This could crash the qemu-nbd server if a client sent unexpected data during connection negotiation. A remote user or process could use this flaw to crash the qemu-nbd server resulting in denial of service.

Record
CVE-2017-7539
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-617
Updated
2026-11-02
EUVDEUVD-2017-16552 5.3

An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD) server's initial connection negotiation, where the I/O coroutine was undefined. This could crash the qemu-nbd server if a client sent unexpected data during connection negotiation. A remote user or process could use this flaw to crash the qemu-nbd server resulting in denial of service.

Record
EUVD-2017-16552
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-03
GitHub AdvisoriesGHSA-8vvg-hj6f-q4wj 7.5

An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD)...

An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD) server's initial connection negotiation, where the I/O coroutine was undefined. This could crash the qemu-nbd server if a client sent unexpected data during connection negotiation. A remote user or process could use this flaw to crash the qemu-nbd server resulting in denial of service.

Record
GHSA-8vvg-hj6f-q4wj
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20, CWE-617
Updated
2026-11-02
NVD 5.3

An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD) server's initial connection negotiation, where the I/O coroutine was undefined. This could crash the qemu-nbd server if a client sent unexpected data during connection negotiation. A remote user or process could use this flaw to crash the qemu-nbd server resulting in denial of service.

Record
CVE-2017-7539
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-617, CWE-20
Updated
2026-11-02
OSV 7.5

An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD) server's initial connection negotiation, where the I/O coroutine was undefined. This could crash the qemu-nbd server if a client sent unexpected data during connection negotiation. A remote user or process could use this flaw to crash the qemu-nbd server resulting in denial of service.

Record
CVE-2017-7539
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2017:2628 5.3

Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

Record
RHSA-2017:2628
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
Show 6 moreShow less
OSVRHSA-2017:3466 5.5

Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

Record
RHSA-2017:3466
CVSS 3.0
5.5 MediumCVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2017:3470 5.5

Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

Record
RHSA-2017:3470
CVSS 3.0
5.5 MediumCVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2017:3471 5.5

Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

Record
RHSA-2017:3471
CVSS 3.0
5.5 MediumCVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2017:3472 5.5

Red Hat Security Advisory: qemu-kvm-rhev security update

Record
RHSA-2017:3472
CVSS 3.0
5.5 MediumCVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2017:3473 5.5

Red Hat Security Advisory: qemu-kvm-rhev security update

Record
RHSA-2017:3473
CVSS 3.0
5.5 MediumCVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2017:3474 5.5

Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

Record
RHSA-2017:3474
CVSS 3.0
5.5 MediumCVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qemu-img-rhev
Red Hat:enterprise_linux:7::hypervisor
 before 10:2.9.0-16.el7_4.5
10:2.9.0-16.el7_4.5
qemu-kvm-common-rhev
Red Hat:enterprise_linux:7::hypervisor
 before 10:2.9.0-16.el7_4.5
10:2.9.0-16.el7_4.5
qemu-kvm-rhev
Red Hat:enterprise_linux:7::hypervisor
 before 10:2.9.0-16.el7_4.5
10:2.9.0-16.el7_4.5
qemu-kvm-rhev-debuginfo
Red Hat:enterprise_linux:7::hypervisor
 before 10:2.9.0-16.el7_4.5
10:2.9.0-16.el7_4.5
qemu-kvm-tools-rhev
Red Hat:enterprise_linux:7::hypervisor
 before 10:2.9.0-16.el7_4.5
10:2.9.0-16.el7_4.5
qemu-img-rhev
Red Hat:openstack:11::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-common-rhev
Red Hat:openstack:11::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-rhev
Red Hat:openstack:11::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-rhev-debuginfo
Red Hat:openstack:11::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-tools-rhev
Red Hat:openstack:11::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
Show 25 moreShow less
Affected packages
PackageAffectedFixed
qemu-img-rhev
Red Hat:openstack:9::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-common-rhev
Red Hat:openstack:9::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-rhev
Red Hat:openstack:9::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-rhev-debuginfo
Red Hat:openstack:9::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-tools-rhev
Red Hat:openstack:9::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-img-rhev
Red Hat:openstack:8::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-common-rhev
Red Hat:openstack:8::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-rhev
Red Hat:openstack:8::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-rhev-debuginfo
Red Hat:openstack:8::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-tools-rhev
Red Hat:openstack:8::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-img-rhev
Red Hat:openstack:7::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-common-rhev
Red Hat:openstack:7::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-rhev
Red Hat:openstack:7::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-rhev-debuginfo
Red Hat:openstack:7::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-tools-rhev
Red Hat:openstack:7::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-img-rhev
Red Hat:openstack:6::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-common-rhev
Red Hat:openstack:6::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-rhev
Red Hat:openstack:6::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-rhev-debuginfo
Red Hat:openstack:6::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-tools-rhev
Red Hat:openstack:6::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-img-rhev
Red Hat:openstack:10::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-common-rhev
Red Hat:openstack:10::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-rhev
Red Hat:openstack:10::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-rhev-debuginfo
Red Hat:openstack:10::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11
qemu-kvm-tools-rhev
Red Hat:openstack:10::el7
From an advisory covering 5 CVEs
 before 10:2.9.0-16.el7_4.11
10:2.9.0-16.el7_4.11

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-7539 is a medium vulnerability (CVSS 5.3) in Qemu, published July 26, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.46%, the 92nd percentile. Fixed in qemu-img-rhev 10:2.9.0-16.el7_4.5.

References

Show 45 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open