[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffSvIqi1hX1NHlQQ33q64UixKFX5xxnzIRwMGc4YLehg":3,"g5a-risk:CVE-2017-15118":181},{"success":4,"data":5,"meta":179},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":15,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":71,"references":72,"referencesCount":106,"weaknesses":107,"weaknessesCount":121,"isActivelyExploited":122,"cisaInfo":15,"otxData":15,"relatedBlogPosts":123,"seoMetadata":124,"configurations":149,"relatedVendorCves":170,"notableEvents":171},"CVE-2017-15118","What is CVE-2017-15118?","A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.","A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up...","2018-07-27T21:29:00.337","2023-11-07T02:39:20.973",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":38,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":37},"53f830b8-0a3f-465b-8143-3b8a9948e749","Secondary",{"Version":21,"VectorString":34,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":35,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L","CHANGED",8.3,3.7,[39],{"Source":18,"Type":19,"CVSSData":40,"BaseSeverity":26,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":41,"VectorString":42,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.11931,[47,47,47,47,47,47,47],"Critical",[51,55,60,63,66],{"vendor":52,"product":52,"version":53,"criteria":54,"vulnerable":4},"qemu","*","cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"canonical","ubuntu_linux","14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":56,"product":57,"version":61,"criteria":62,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":56,"product":57,"version":64,"criteria":65,"vulnerable":4},"17.10","cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",{"vendor":67,"product":68,"version":69,"criteria":70,"vulnerable":4},"redhat","enterprise_linux","7.0","cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",5,[73,80,85,89,93,98,102],{"url":74,"source":75,"tags":76},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2017\u002F11\u002F28\u002F8","Openwall",[77,78,79],"Mailing List","Patch","Third Party Advisory",{"url":81,"source":82,"tags":83},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F101975","Securityfocus",[79,84],"VDB Entry",{"url":86,"source":87,"tags":88},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:1104","Red Hat",[79],{"url":90,"source":87,"tags":91},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2017-15118",[92,78,79],"Issue Tracking",{"url":94,"source":95,"tags":96},"https:\u002F\u002Flists.gnu.org\u002Farchive\u002Fhtml\u002Fqemu-devel\u002F2017-11\u002Fmsg05045.html","Gnu",[97,78,79],"Exploit",{"url":99,"source":100,"tags":101},"https:\u002F\u002Fusn.ubuntu.com\u002F3575-1\u002F","Ubuntu",[79],{"url":103,"source":104,"tags":105},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F43194\u002F","Exploit-db",[97,79,84],7,[108,116],{"id":109,"name":110,"description":111,"extendedDescription":112,"status":113,"abstraction":114,"structure":115},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","","Draft","Variant","Simple",{"id":117,"name":118,"description":119,"extendedDescription":112,"status":113,"abstraction":120,"structure":115},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","Base",2,false,[],{"title":125,"metaDescription":126,"keywords":127,"canonicalUrl":128,"structuredData":129},"What is CVE-2017-15118? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-15118, a critical severity cyber security vulnerability from 2018. A stack-based buffer overflow vulnerability was found i...","CVE-2017-15118, CVE-2017-15118 vulnerability, CVE-2017-15118 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, qemu security, canonical security, redhat security, qemu vulnerability, ubuntu_linux vulnerability, enterprise_linux vulnerability","\u002Fwhat-is\u002Fcve-2017-15118",{"@context":130,"@type":131,"headline":125,"description":126,"datePublished":10,"dateModified":11,"author":132,"publisher":136,"about":140,"mainEntityOfPage":144,"articleSection":147,"keywords":148},"https:\u002F\u002Fschema.org","TechArticle",{"@type":133,"name":134,"url":135},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":133,"name":134,"url":135,"logo":137},{"@type":138,"url":139},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":141,"name":6,"description":142,"additionalType":143},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":145,"@id":146},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-15118","Cybersecurity","CVE-2017-15118, CVE-2017-15118 vulnerability, CVE-2017-15118 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[150,158],{"Operator":15,"Negate":15,"Nodes":151},[152],{"Operator":153,"Negate":15,"CPEMatch":154},"OR",[155],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":156,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":157,"VersionEndIncluding":15},"2CA4C93C-41E3-4365-B877-650C2EF52ACA","2.11",{"Operator":15,"Negate":15,"Nodes":159},[160],{"Operator":153,"Negate":15,"CPEMatch":161},[162,164,166,168],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":163,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":165,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":167,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9070C9D8-A14A-467F-8253-33B966C16886",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":169,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"142AD0DD-4CF3-4D74-9442-459CE3347E3A",[],[172],{"id":173,"eventType":174,"eventTime":175,"details":176,"label":177,"color":178},"c78550f1-d43d-4810-a6b2-8a14448448b7","HIGH_EPSS_DELTA","2026-06-16T04:06:25.354887+00:00","Daily EPSS score increased by 0.105 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":180,"version":41},1792347415787,{"score":182,"band":183,"action":184,"scoredAt":185},57,"Medium","Plan remediation","2026-10-16T06:44:39.042159+00:00"]