CVE-2024-7409

Published: Aug 5, 2024

Modified: Mar 2, 2026

PUBLISHED

CVSS v3.0

7.5

HIGH

Description

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.

Vendor	Product	Versions
Unknown	qemu	unaffected `7.2.0` unaffected `8.2.0` unaffected `9.0.0`
Red Hat	Red Hat Enterprise Linux 8	unaffected `8100020240905091210.489197e6 - < *`
Red Hat	Red Hat Enterprise Linux 8	unaffected `8100020240905091210.489197e6 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `17:9.0.0-10.el9_5 - < *`
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	unaffected `17:7.2.0-14.el9_2.14 - < *`
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	unaffected `17:8.2.0-11.el9_4.8 - < *`
Red Hat	Red Hat OpenShift Container Platform 4.13	unaffected `413.92.202411212100-0 - < *`
Red Hat	Red Hat OpenShift Container Platform 4.13	unaffected `413.92.202409180051-0 - < *`
Red Hat	Red Hat OpenShift Container Platform 4.14	unaffected `414.92.202411130444-0 - < *`
Red Hat	Red Hat OpenShift Container Platform 4.15	unaffected `415.92.202409162258-0 - < *`
Red Hat	Red Hat OpenShift Container Platform 4.15	unaffected `415.92.202411050056-0 - < *`
Red Hat	Red Hat OpenShift Container Platform 4.16	unaffected `416.94.202411261619-0 - < *`
Red Hat	Red Hat OpenShift Container Platform 4.17	unaffected `417.94.202411261220-0 - < *`
Red Hat	Red Hat Enterprise Linux 10	All versions
Red Hat	Red Hat Enterprise Linux 6	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat Enterprise Linux 8 Advanced Virtualization	All versions
Red Hat	Red Hat Enterprise Linux 8 Advanced Virtualization	All versions
Red Hat	Red Hat Enterprise Linux 8 Advanced Virtualization	All versions
Red Hat	Red Hat Enterprise Linux 8 Advanced Virtualization	All versions