CVE-2024-7409CWE-662

CVE-2024-7409

High · published August 5, 2024

CVSS v3.0
7.5
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01027 · 63.3th percentile
Weakness
CWE-662 · Improper Synchronization
Published
2024-08-05T18:15Z
References (15)
https://access.redhat.com/errata/RHSA-2024:10518 · [email protected]https://access.redhat.com/errata/RHSA-2024:10528 · [email protected]https://access.redhat.com/errata/RHSA-2024:10813 · [email protected]https://access.redhat.com/errata/RHSA-2024:6811 · [email protected]https://access.redhat.com/errata/RHSA-2024:6818 · [email protected]https://access.redhat.com/errata/RHSA-2024:6964 · [email protected]https://access.redhat.com/errata/RHSA-2024:7408 · [email protected]https://access.redhat.com/errata/RHSA-2024:8991 · [email protected]https://access.redhat.com/errata/RHSA-2024:9136 · [email protected]https://access.redhat.com/errata/RHSA-2024:9620 · [email protected]https://access.redhat.com/errata/RHSA-2024:9912 · [email protected]https://access.redhat.com/security/cve/CVE-2024-7409 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2302487 · [email protected]https://lists.debian.org/debian-lts-announce/2025/09/msg00011.html · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20250502-0008/ · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 05 AUG 13:19Z
    Qemu: denial of service via improper synchronization in qemu nbd server during socket closure
    cvelistv5