CVE-2024-7409: Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

Description

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.

Classification

CVE ID: CVE-2024-7409

Affected Products

Vendor: Red Hat

Product: Red Hat Enterprise Linux 8

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.05% (probability of being exploited)

EPSS Percentile: 19.37% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

Timeline

2024-12-04 00:11:45 UTC
CVE

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure