Stack-based buffer overflow in QEMU - CVE-2017-15118
Published: August 7, 2018
Vulnerability identifier: #VU14217
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-15118
CWE-ID: CWE-121
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists in the network block device (NBD) server implementation due to stack-based buffer overflow when handling malicious input. A remote unauthenticated attacker can send a large export-name request, trigger memory corruption and cause the service to crash or execute arbitrary code with elevated privileges.
Affected software
QEMU
Red Hat Virtualization
Red Hat Virtualization for IBM Power LE
Fedora
qemu
Red Hat Virtualization
Red Hat Virtualization for IBM Power LE
Fedora
qemu
How to mitigate CVE-2017-15118
Update to version 2.11 or later.
QEMU - update to 2.11.0
qemu - update to 2.10.2-1.fc27
qemu - update to 2.10.2-1.fc27