Total vulnerabilities in the database
An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD) server's initial connection negotiation, where the I/O coroutine was undefined. This could crash the qemu-nbd server if a client sent unexpected data during connection negotiation. A remote user or process could use this flaw to crash the qemu-nbd server resulting in denial of service.
| Software | From | Fixed in |
|---|---|---|
| qemu / qemu | - | 2.10.1 |
| redhat / openstack | 7.0 | 7.0.x |
| redhat / openstack | 6.0 | 6.0.x |
| redhat / virtualization | 4.0 | 4.0.x |
| redhat / openstack | 10 | 10.x |
| redhat / openstack | 9 | 9.x |
| redhat / openstack | 8 | 8.x |
| redhat / openstack | 11 | 11.x |
| redhat / virtualization | 3.0 | 3.0.x |