Description (CNA)
A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | unaffected 7.2.0; unaffected 8.2.0; unaffected 9.0.0 |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected 8100020240905091210.489197e6 before * |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected 8100020240905091210.489197e6 before * |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected 17:9.0.0-10.el9_5 before * |
| Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Support | unaffected 17:7.2.0-14.el9_2.14 before * |
| Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support | unaffected 17:8.2.0-11.el9_4.8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.13 | unaffected 413.92.202411212100-0 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.13 | unaffected 413.92.202409180051-0 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected 414.92.202411130444-0 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.15 | unaffected 415.92.202409162258-0 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.15 | unaffected 415.92.202411050056-0 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.16 | unaffected 416.94.202411261619-0 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.17 | unaffected 417.94.202411261220-0 before * |
| Red Hat / Red Hat Enterprise Linux 10 | unaffected |
| Red Hat / Red Hat Enterprise Linux 6 | unknown |
| Red Hat / Red Hat Enterprise Linux 7 | unknown |
| Red Hat / Red Hat Enterprise Linux 7 | unknown |
| Red Hat / Red Hat Enterprise Linux 8 Advanced Virtualization | affected |
| Red Hat / Red Hat Enterprise Linux 8 Advanced Virtualization | affected |
| Red Hat / Red Hat Enterprise Linux 8 Advanced Virtualization | affected |
| Red Hat / Red Hat Enterprise Linux 8 Advanced Virtualization | affected |
| Red Hat / Red Hat OpenShift Container Platform 4 | affected |
CWE
CWE-662
References
- https://access.redhat.com/errata/RHSA-2024:10518
- https://access.redhat.com/errata/RHSA-2024:10528
- https://access.redhat.com/errata/RHSA-2024:10813
- https://access.redhat.com/errata/RHSA-2024:6811
- https://access.redhat.com/errata/RHSA-2024:6818
- https://access.redhat.com/errata/RHSA-2024:6964
- https://access.redhat.com/errata/RHSA-2024:7408
- https://access.redhat.com/errata/RHSA-2024:8991
- https://access.redhat.com/errata/RHSA-2024:9136
- https://access.redhat.com/errata/RHSA-2024:9620
- https://access.redhat.com/errata/RHSA-2024:9912
- https://access.redhat.com/security/cve/CVE-2024-7409
- https://bugzilla.redhat.com/show_bug.cgi?id=2302487
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.