CVE-2017-15118: canonical ubuntu_linux Stack-based Buffer Overflow

Vulnerability summary

CVE-2017-15118 is a critical (CVSS 9.8) Stack-based Buffer Overflow vulnerability in canonical ubuntu_linux. EPSS estimates a 11.93% chance of exploitation in the next 30 days, higher than 96.1% of scored vulnerabilities. 2 public exploits are recorded.

Timeline

1. 27-07-2018
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.

• CWE-121Stack-based Buffer OverflowThe product writes past the end of a buffer that was allocated on the stack.
• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.