{"id":"CVE-2017-2630","aliases":["BELL-CVE-2017-2630","DEBIAN-CVE-2017-2630","EUVD-2017-11791","GHSA-2rf9-cmpf-qww5","RHSA-2017:2392","openSUSE-SU-2024:11287-1"],"status":"published","title":"A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the...","description":"A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw could occur while processing server's response to a 'NBD_OPT_LIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the QEMU process.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.02647,"percentile":0.85712,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-121"],"published":"2018-07-27T18:00:00Z","modified":"2026-10-24T14:21:12Z","fixes":[{"ecosystem":"Debian:12","package":"qemu","fixed_in":["1:2.8+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qemu","fixed_in":["1:2.8+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qemu","fixed_in":["1:2.8+dfsg-3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.8+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.8+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.8+dfsg-3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"qemu-img-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-14.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"qemu-kvm-common-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-14.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"qemu-kvm-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-14.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"qemu-kvm-rhev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-14.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"qemu-kvm-tools-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-14.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.0-32.1"}]}],"bundled":135}],"products":[{"vendor":"qemu","product":"qemu"},{"vendor":"qemu","product":"qemu:"},{"vendor":"red hat","product":"qemu:"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2017:2392","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/96265","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://security.gentoo.org/glsa/201704-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2017/02/15/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg01246.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2630","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1422415","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://github.com/qemu/qemu/commit/2563c9c6b8670400c48e562034b321a7cf3d9a85","tags":["x_refsource_MISC","x_transferred","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2630","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-2rf9-cmpf-qww5"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-2630","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-2630","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=750801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=971799","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1032873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1038963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1046612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1055093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1086193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1159726","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1159728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1175113","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1179045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1189998","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1193826","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1219541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1231739","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1248279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1254422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1256618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1262277","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1262676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1264255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1264258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1271060","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1274567","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1281407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1285928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1291284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1293975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1295637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1299876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314131","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329145","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1334398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1342434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1352620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1352769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1354177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1360301","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366919","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1369012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1369031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1369641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1369795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1373264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1373600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1373604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1373710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1373816","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376755","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1378334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1378536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1378538","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1378694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1378816","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1379034","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1379206","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1380258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1381630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1383012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1384124","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1384909","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1387372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1387600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1389238","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390316","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390991","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1391942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1392328","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1392359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1393322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1393698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1394140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1396536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400785","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402265","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404137","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1405123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1409973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1415199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1415947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416157","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416681","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1420195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1420216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1420679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1421626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1421788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1422846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1425151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1425178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1425273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1425700","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1425765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1427466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1428534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1428810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1430620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431224","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1432295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1432382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1432588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1433193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1433921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1434666","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1434706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1434743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1434784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1435086","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1435521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437393","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1438566","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1440619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1440667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1440677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443029","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1445174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1446003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1446498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1447184","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1447257","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1447551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1447581","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1447590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1447592","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1447874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1450759","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1451191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1451483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1451629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1451631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1451849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1451862","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452148","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452605","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1453169","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1454582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1454641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1455150","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1456424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1456456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1457088","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1457740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458782","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1459132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461561","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461827","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2392.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4020","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4020","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4020","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6835","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6835","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6835","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6888","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6888","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6888","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7422","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7422","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7422","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7466","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7466","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8576","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8576","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8576","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8669","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8669","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8669","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8909","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8909","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8909","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8910","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8910","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8910","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9907","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9907","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9907","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9911","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9911","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9911","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9921","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9921","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9921","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9922","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9922","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9922","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10155","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10155","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-2630","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2630","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5579","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5579","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5579","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5898","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5898","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5898","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5973","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5973","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5973","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9310","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9310","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9310","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9373","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9373","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9373","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9374","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9374","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9374","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9375","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9375","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9375","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-03812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3682","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-2630","description":"A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw could occur while processing server's response to a 'NBD_OPT_LIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the QEMU process.","status":"published","published":"2018-07-27T18:00:00Z","modified":"2024-08-05T14:02:07.177Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:33:15.887816Z"}],"euvd":[{"id":"EUVD-2017-11791","description":"A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw could occur while processing server's response to a 'NBD_OPT_LIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the QEMU process.","status":"published","published":"2018-07-27T18:00:00Z","modified":"2024-08-05T14:02:07Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T02:39:20.035866Z"}],"ghsa":[{"id":"GHSA-2rf9-cmpf-qww5","title":"A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the...","description":"A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw could occur while processing server's response to a 'NBD_OPT_LIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the QEMU process.","status":"published","published":"2022-05-13T01:06:53Z","modified":"2023-02-01T05:03:06Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:50:01.019018Z"}],"nvd":[{"id":"CVE-2017-2630","description":"A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw could occur while processing server's response to a 'NBD_OPT_LIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the QEMU process.","status":"published","published":"2018-07-27T18:29:00.923Z","modified":"2026-06-17T01:16:32.92Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-121","CWE-119"],"updated_at":"2026-11-02T14:04:18.679411Z"}],"osv":[{"id":"BELL-CVE-2017-2630","title":"CVE-2017-2630 does not affect BellSoft software","status":"withdrawn","published":"2018-07-27T18:29:00Z","modified":"2026-01-26T09:48:17.734245Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-2630","description":"A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw could occur while processing server's response to a 'NBD_OPT_LIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the QEMU process.","status":"published","published":"2018-07-27T18:29:00.923Z","modified":"2026-10-24T14:21:12.080891861Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:05.486486Z"},{"id":"DEBIAN-CVE-2017-2630","description":"A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw could occur while processing server's response to a 'NBD_OPT_LIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the QEMU process.","status":"published","published":"2018-07-27T18:29:00.923Z","modified":"2026-09-01T20:03:47.852967496Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"RHSA-2017:2392","title":"Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update","status":"published","published":"2024-09-13T16:48:09Z","modified":"2026-07-01T10:02:42Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"openSUSE-SU-2024:11287-1","title":"qemu-6.1.0-32.1 on GA media","description":"These are all security issues fixed in the qemu-6.1.0-32.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:57.481645Z","updated_at":"2026-11-02T16:58:34.894275Z"}]}}