Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 8

Количество 8

ubuntu логотип

CVE-2017-15118

больше 8 лет назад

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.

CVSS3: 9.8
EPSS: Средний
redhat логотип

CVE-2017-15118

почти 9 лет назад

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.

CVSS3: 8.3
EPSS: Средний
nvd логотип

CVE-2017-15118

больше 8 лет назад

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.

CVSS3: 9.8
EPSS: Средний
debian логотип

CVE-2017-15118

больше 8 лет назад

A stack-based buffer overflow vulnerability was found in NBD server im ...

CVSS3: 9.8
EPSS: Средний
github логотип

GHSA-p8q8-xqgv-rwvr

больше 4 лет назад

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.

CVSS3: 9.8
EPSS: Средний
altlinux логотип

ALT-PU-2018-1076

почти 9 лет назад

ALT-PU-2018-1076: package `xen` update to version 4.10.0-alt4.S1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2018-2521

около 8 лет назад

ALT-PU-2018-2521: package `xen` update to version 4.10.1-alt6

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2017-2829

почти 9 лет назад

ALT-PU-2017-2829: package `qemu` update to version 2.11.0-alt1

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2017-15118

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.

CVSS3: 9.8
12%
Средний
больше 8 лет назад
redhat логотип
CVE-2017-15118

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.

CVSS3: 8.3
12%
Средний
почти 9 лет назад
nvd логотип
CVE-2017-15118

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.

CVSS3: 9.8
12%
Средний
больше 8 лет назад
debian логотип
CVE-2017-15118

A stack-based buffer overflow vulnerability was found in NBD server im ...

CVSS3: 9.8
12%
Средний
больше 8 лет назад
github логотип
GHSA-p8q8-xqgv-rwvr

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.

CVSS3: 9.8
12%
Средний
больше 4 лет назад
altlinux логотип
ALT-PU-2018-1076

ALT-PU-2018-1076: package `xen` update to version 4.10.0-alt4.S1

CVSS3: 9.8
почти 9 лет назад
altlinux логотип
ALT-PU-2018-2521

ALT-PU-2018-2521: package `xen` update to version 4.10.1-alt6

CVSS3: 9.8
около 8 лет назад
altlinux логотип
ALT-PU-2017-2829

ALT-PU-2017-2829: package `qemu` update to version 2.11.0-alt1

CVSS3: 9.8
почти 9 лет назад

Уязвимостей на страницу