Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Scientific Linux 7: SLSA-2017:2445-1 Moderate: Crash in qemu-kvm

Calendar Aug 21, 2017 • User Avatar LinuxSecurity Advisories
1 - 2 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory moderate severity dos attack remote crash qemu-kvm scientific linux
Quick Emulator (QEMU) built with the Network Block Device (NBD) Server support is vulnerable to a crash via a SIGPIPE signal. The crash can occur if a client aborts a connection due to any failure during negotiation or read operation. A remote user/process could use this flaw to crash the qemu-nbd server resulting in a DoS. (CVE-2017-10664) SL7 x86_64 qemu-img-1.5.3-141.el7_4.1.x86_64.r [More...] 
Synopsis:          Moderate: qemu-kvm security update
Advisory ID:       SLSA-2017:2445-1
Issue Date:        2017-08-15
CVE Numbers:       CVE-2017-10664
--

Security Fix(es):

* Quick Emulator (QEMU) built with the Network Block Device (NBD) Server
support is vulnerable to a crash via a SIGPIPE signal. The crash can occur
if a client aborts a connection due to any failure during negotiation or
read operation. A remote user/process could use this flaw to crash the
qemu-nbd server resulting in a DoS. (CVE-2017-10664)
--

SL7
  x86_64
    qemu-img-1.5.3-141.el7_4.1.x86_64.rpm
    qemu-kvm-1.5.3-141.el7_4.1.x86_64.rpm
    qemu-kvm-common-1.5.3-141.el7_4.1.x86_64.rpm
    qemu-kvm-debuginfo-1.5.3-141.el7_4.1.x86_64.rpm
    qemu-kvm-tools-1.5.3-141.el7_4.1.x86_64.rpm

- Scientific Linux Development Team