CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: a stack buffer overflow flaw was found in the quick emulator (qemu) before 2.9 built with the network block device (nbd) client support. the flaw could occur while processing server's response to a 'nbd_opt_list' request. a malicious nbd server could use this issue to crash a remote nbd client resulting in dos or potentially execute arbitrary code on client host with privileges of the qemu process.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-07-27
Last Modified Date: 2019-10-09