Vulnerability CVE-2017-10664: Information

Description

qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2017-10664
Published: Aug. 2, 2017
Modified: Aug. 4, 2021

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
pve-qemusisyphus2.9.0-alt38.1.5-alt1ALT-PU-2017-1993-1186770Fixed
pve-qemup102.9.0-alt37.2.0-alt4ALT-PU-2017-1993-1186770Fixed
pve-qemup92.9.0-alt35.1.0-alt6ALT-PU-2017-1993-1186770Fixed
pve-qemup82.9.0-alt0.M80P.32.12.1-alt1ALT-PU-2017-1994-1186771Fixed
pve-qemuc10f12.9.0-alt37.2.0-alt3ALT-PU-2017-1993-1186770Fixed
pve-qemuc9f22.9.0-alt35.1.0-alt6ALT-PU-2017-1993-1186770Fixed
pve-qemup112.9.0-alt38.1.5-alt1ALT-PU-2017-1993-1186770Fixed
qemusisyphus2.10.0-alt18.2.3-alt1ALT-PU-2017-2175-1187863Fixed
qemusisyphus_e2k7.2.0-alt3.E2K.37.2.0-alt3.E2K.4ALT-PU-2024-1953-1-Fixed
qemup102.10.0-alt18.2.2-alt0.p10.1ALT-PU-2017-2175-1187863Fixed
qemup10_e2k7.2.0-alt3.E2K.07.2.0-alt3.E2K.3ALT-PU-2023-6766-1-Fixed
qemup92.10.0-alt15.2.0-alt6ALT-PU-2017-2175-1187863Fixed
qemup82.11.0-alt0.M80P.12.11.0-alt0.M80P.4ALT-PU-2018-1018-1197530Fixed
qemuc10f12.10.0-alt18.2.2-alt0.p10.1ALT-PU-2017-2175-1187863Fixed
qemuc9f22.10.0-alt15.2.0-alt6.c9.1ALT-PU-2017-2175-1187863Fixed
qemuc72.5.1.1-alt0.M70C.52.5.1.1-alt0.M70C.5ALT-PU-2017-2394-1188849Fixed
qemup112.10.0-alt18.2.3-alt1ALT-PU-2017-2175-1187863Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
[qemu-devel] 20170611 [PATCH] qemu-nbd: Ignore SIGPIPE
  • Mailing List
  • Patch
  • Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1466190
  • Issue Tracking
  • Patch
  • Third Party Advisory
99513
  • Third Party Advisory
  • VDB Entry
[oss-security] 20170629 CVE-2017-10664 Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort
  • Mailing List
  • Patch
  • Third Party Advisory
DSA-3920
  • Third Party Advisory
RHSA-2017:3474
  • Third Party Advisory
RHSA-2017:3473
  • Third Party Advisory
RHSA-2017:3472
  • Third Party Advisory
RHSA-2017:3471
  • Third Party Advisory
RHSA-2017:3470
  • Third Party Advisory
RHSA-2017:3466
  • Third Party Advisory
RHSA-2017:2445
  • Third Party Advisory
RHSA-2017:2390
  • Third Party Advisory
[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update
  • Mailing List
  • Third Party Advisory

    1. Configuration 1

      cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
      End including
      2.9.1

      Configuration 2

      cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
      cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

      Configuration 3

      cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*
      cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

      Configuration 4

      cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*
      cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*
      cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*
      cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*
      cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*
      cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*

      Configuration 5

      cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top