CVE-2017-10664
En bref Sévérité Non disponible EPSS EPSS 4.03 % · centile 91 (2026-10-27) État PUBLISHED Publiée 2017-08-02 Mise à jour 2024-08-05 Attribuée par mitre Statut NVD Modified Description qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.
Scores Version Score Vecteur Évalué par CVSS 3.1 HIGH 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P NVD · nvd@nist.gov (Primary)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:* ≤ 2.9.1cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*Produits affectés Produit Versions affected n/a
Références
Sources
