CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: a stack buffer overflow flaw was found in the quick emulator (qemu) before 2.9 built with the network block device (nbd) client support. the flaw could occur while processing server's response to a 'nbd_opt_list' request. a malicious nbd server could use this issue to crash a remote nbd client resulting in dos or potentially execute arbitrary code on client host with privileges of the qemu process.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-07-27
Last Modified Date: 2019-10-09
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Improper Restriction of Operations within the Bounds of a Memory Buffer.
user
CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: a stack buffer overflow flaw was found in the quick emulator (qemu) before 2.9 built with the network block device (nbd) client support. the flaw could occur while processing server's response to a 'nbd_opt_list' request. a malicious nbd server could use this issue to crash a remote nbd client resulting in dos or potentially execute arbitrary code on client host with privileges of the qemu process.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-07-27
Last Modified Date: 2019-10-09
assistant