CVE-2017-9310
QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest...
5.6 MediumFix available
QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to cause a denial of service (infinite loop) via vectors related to setting the initial receive / transmit descriptor head (TDH/RDH) outside the allocated descriptor buffer.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
0.34%Down 2.0 points since Apr 14, 2021
What each source reports
NVD Score used
QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to cause a denial of service (infinite loop) via vectors related to setting the initial receive / transmit descriptor head (TDH/RDH) outside the allocated descriptor buffer.
- Record
CVE-2017-9310- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H - CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-835
- Updated
- 2026-11-02
CVE List No score
QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to cause a denial of service (infinite loop) via vectors related to setting the initial receive / transmit descriptor head (TDH/RDH) outside the allocated descriptor buffer.
- Record
CVE-2017-9310- Updated
- 2026-11-02
EUVDEUVD-2017-18245 No score
QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to cause a denial of service (infinite loop) via vectors related to setting the initial receive / transmit descriptor head (TDH/RDH) outside the allocated descriptor buffer.
- Record
EUVD-2017-18245- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q74v-9phf-c8wh
QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest...
QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to cause a denial of service (infinite loop) via vectors related to setting the initial receive / transmit descriptor head (TDH/RDH) outside the allocated descriptor buffer.
- Record
GHSA-q74v-9phf-c8wh- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H - Weakness
- CWE-835
- Updated
- 2026-11-02
OSVBELL-CVE-2017-9310
CVE-2017-9310 does not affect BellSoft software
- Record
BELL-CVE-2017-9310- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to cause a denial of service (infinite loop) via vectors related to setting the initial receive / transmit descriptor head (TDH/RDH) outside the allocated descriptor buffer.
- Record
CVE-2017-9310- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-9310
QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to cause a denial of service (infinite loop) via vectors related to setting the initial receive / transmit descriptor head (TDH/RDH) outside the allocated descriptor buffer.
- Record
DEBIAN-CVE-2017-9310- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2017:2392
Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update
- Record
RHSA-2017:2392- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2017:2408
Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update
- Record
RHSA-2017:2408- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
qemuDebian:12 |
before 1:2.8+dfsg-7 | 1:2.8+dfsg-7 |
qemuDebian:13 |
before 1:2.8+dfsg-7 | 1:2.8+dfsg-7 |
qemuDebian:14 |
before 1:2.8+dfsg-7 | 1:2.8+dfsg-7 |
qemuDebian:9 From an advisory covering 6 CVEs |
before 1:2.8+dfsg-6+deb9u1, plus listed versions 1:2.8+dfsg-6 |
1:2.8+dfsg-6+deb9u1 |
qemu-img-rhevRed Hat:enterprise_linux:7::hypervisor From an advisory covering 22 CVEs |
before 10:2.9.0-14.el7 | 10:2.9.0-14.el7 |
qemu-kvm-common-rhevRed Hat:enterprise_linux:7::hypervisor From an advisory covering 22 CVEs |
before 10:2.9.0-14.el7 | 10:2.9.0-14.el7 |
qemu-kvm-rhevRed Hat:enterprise_linux:7::hypervisor From an advisory covering 22 CVEs |
before 10:2.9.0-14.el7 | 10:2.9.0-14.el7 |
qemu-kvm-rhev-debuginfoRed Hat:enterprise_linux:7::hypervisor From an advisory covering 22 CVEs |
before 10:2.9.0-14.el7 | 10:2.9.0-14.el7 |
qemu-kvm-tools-rhevRed Hat:enterprise_linux:7::hypervisor From an advisory covering 22 CVEs |
before 10:2.9.0-14.el7 | 10:2.9.0-14.el7 |
qemu-img-rhevRed Hat:openstack:10::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
Show 29 moreShow less
| Package | Affected | Fixed |
|---|---|---|
qemu-kvm-common-rhevRed Hat:openstack:10::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-rhevRed Hat:openstack:10::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-rhev-debuginfoRed Hat:openstack:10::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-tools-rhevRed Hat:openstack:10::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-img-rhevRed Hat:openstack:11::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-common-rhevRed Hat:openstack:11::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-rhevRed Hat:openstack:11::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-rhev-debuginfoRed Hat:openstack:11::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-tools-rhevRed Hat:openstack:11::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-img-rhevRed Hat:openstack:6::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-common-rhevRed Hat:openstack:6::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-rhevRed Hat:openstack:6::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-rhev-debuginfoRed Hat:openstack:6::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-tools-rhevRed Hat:openstack:6::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-img-rhevRed Hat:openstack:7::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-common-rhevRed Hat:openstack:7::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-rhevRed Hat:openstack:7::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-rhev-debuginfoRed Hat:openstack:7::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-tools-rhevRed Hat:openstack:7::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-img-rhevRed Hat:openstack:8::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-common-rhevRed Hat:openstack:8::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-rhevRed Hat:openstack:8::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-rhev-debuginfoRed Hat:openstack:8::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-tools-rhevRed Hat:openstack:8::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-img-rhevRed Hat:openstack:9::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-common-rhevRed Hat:openstack:9::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-rhevRed Hat:openstack:9::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-rhev-debuginfoRed Hat:openstack:9::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
qemu-kvm-tools-rhevRed Hat:openstack:9::el7 From an advisory covering 23 CVEs |
before 10:2.9.0-10.el7 | 10:2.9.0-10.el7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-9310 is a medium vulnerability (CVSS 5.6) in Qemu, published June 8, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. Fixed in qemu 1:2.8+dfsg-7.
References
git.qemu.org?p=qemu.git%3Ba=commitdiff%3Bh=4154c7e03fa55b4cf52509a83d50d6c09d743b7
securityfocus.com/bid/98766
debian.org/security/2017/dsa-3920
openwall.com/lists/oss-security/2017/05/31/1
security.gentoo.org/glsa/201706-03
access.redhat.com/errata/RHSA-2017:2392
Show 194 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=1452620
nvd.nist.gov/vuln/detail/CVE-2017-9310
github.com/advisories/GHSA-q74v-9phf-c8wh
docs.bell-sw.com/security/cves/CVE-2017-9310
security-tracker.debian.org/tracker/CVE-2017-9310
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2392.json
cve.org/CVERecord?id=CVE-2016-4020
This page doesn't list everything
Left out here: 128 references. The JSON record has them.