CVE-2017-15119 - qemu: DoS via large option request

Back Back to CVE browser

HIGH

qemu: DoS via large option request

Published Jul 27, 2018

8.6

HIGH

CVSS 3.0

EPSS 3.28%

Description

The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other requests, resulting in DoS.

Affected products

Vendor QEMU Product QEMU Default
n/a
- Version
  2.11
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

QEMU

n/a

Version	Status	Constraints
2.11	affected	-

Red Hat OpenStack Platform 10.0 (Newton)

qemu-kvm-rhev-10:2.10.0-21.el7

Fixed · RHSA-2018:1113
Red Hat OpenStack Platform 11.0 (Ocata)

qemu-kvm-rhev-10:2.10.0-21.el7

Fixed · RHSA-2018:1113
Red Hat OpenStack Platform 12.0 (Pike)

qemu-kvm-rhev-10:2.10.0-21.el7

Fixed · RHSA-2018:1113
Red Hat OpenStack Platform 8.0 (Liberty)

qemu-kvm-rhev-10:2.10.0-21.el7

Fixed · RHSA-2018:1113
Red Hat OpenStack Platform 9.0 (Mitaka)

qemu-kvm-rhev-10:2.10.0-21.el7

Fixed · RHSA-2018:1113
Red Hat Virtualization 4 for Red Hat Enterprise Linux 7

qemu-kvm-rhev-10:2.10.0-21.el7

Fixed · RHSA-2018:1104
Red Hat Enterprise Linux 5

kvm

Not affected
Red Hat Enterprise Linux 5

xen

Not affected
Red Hat Enterprise Linux 6

qemu-kvm

Not affected
Red Hat Enterprise Linux 6

qemu-kvm-rhev

Not affected
Red Hat Enterprise Linux 7

qemu-kvm

Not affected
Red Hat Enterprise Linux 7

qemu-kvm-ma

Affected
Red Hat Enterprise Linux 7

qemu-kvm-rhev

Affected
Red Hat Enterprise Linux OpenStack Platform 6 (Juno)

qemu-kvm-rhev

Will not fix
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)

qemu-kvm-rhev

Will not fix
Red Hat OpenShift Enterprise 3

qemu-kvm

Not affected

Product	Package	State	Advisory
Red Hat OpenStack Platform 10.0 (Newton)	qemu-kvm-rhev-10:2.10.0-21.el7	Fixed	RHSA-2018:1113
Red Hat OpenStack Platform 11.0 (Ocata)	qemu-kvm-rhev-10:2.10.0-21.el7	Fixed	RHSA-2018:1113
Red Hat OpenStack Platform 12.0 (Pike)	qemu-kvm-rhev-10:2.10.0-21.el7	Fixed	RHSA-2018:1113
Red Hat OpenStack Platform 8.0 (Liberty)	qemu-kvm-rhev-10:2.10.0-21.el7	Fixed	RHSA-2018:1113
Red Hat OpenStack Platform 9.0 (Mitaka)	qemu-kvm-rhev-10:2.10.0-21.el7	Fixed	RHSA-2018:1113
Red Hat Virtualization 4 for Red Hat Enterprise Linux 7	qemu-kvm-rhev-10:2.10.0-21.el7	Fixed	RHSA-2018:1104
Red Hat Enterprise Linux 5	kvm	Not affected	n/a
Red Hat Enterprise Linux 5	xen	Not affected	n/a
Red Hat Enterprise Linux 6	qemu-kvm	Not affected	n/a
Red Hat Enterprise Linux 6	qemu-kvm-rhev	Not affected	n/a
Red Hat Enterprise Linux 7	qemu-kvm	Not affected	n/a
Red Hat Enterprise Linux 7	qemu-kvm-ma	Affected	n/a
Red Hat Enterprise Linux 7	qemu-kvm-rhev	Affected	n/a
Red Hat Enterprise Linux OpenStack Platform 6 (Juno)	qemu-kvm-rhev	Will not fix	n/a
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)	qemu-kvm-rhev	Will not fix	n/a
Red Hat OpenShift Enterprise 3	qemu-kvm	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (12)

http://www.openwall.com/lists/oss-security/2017/11/28/9
x_refsource_MISCMailing ListPatchThird Party Advisory
http://www.securityfocus.com/bid/102011
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2018:1104
vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:1113
vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/security/cve/CVE-2017-15119
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1516925
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15119
x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg05044.html
x_refsource_MISCMailing ListThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-15119
https://usn.ubuntu.com/3575-1/
vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2017-15119
https://www.debian.org/security/2018/dsa-4213
vendor-advisoryx_refsource_DEBIANThird Party Advisory

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2017/11/28/9		x_refsource_MISCMailing ListPatchThird Party Advisory
http://www.securityfocus.com/bid/102011		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2018:1104		vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:1113		vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/security/cve/CVE-2017-15119		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1516925		Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15119		x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg05044.html		x_refsource_MISCMailing ListThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-15119
https://usn.ubuntu.com/3575-1/		vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2017-15119
https://www.debian.org/security/2018/dsa-4213		vendor-advisoryx_refsource_DEBIANThird Party Advisory