CVE-2024-7409

Description

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.

CVSS v3.1 Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-662 CWE-662

References

Other References

https://access.redhat.com/errata/RHSA-2024:10518 https://access.redhat.com/errata/RHSA-2024:10528 https://access.redhat.com/errata/RHSA-2024:10813 https://access.redhat.com/errata/RHSA-2024:6811 https://access.redhat.com/errata/RHSA-2024:6818 https://access.redhat.com/errata/RHSA-2024:6964 https://access.redhat.com/errata/RHSA-2024:7408 https://access.redhat.com/errata/RHSA-2024:8991 https://access.redhat.com/errata/RHSA-2024:9136 https://access.redhat.com/errata/RHSA-2024:9620

Frequently Asked Questions

What is CVE-2024-7409? +

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline. It has a CVSS v3.1 base score of 7.5 (HIGH).

How severe is CVE-2024-7409? +

CVE-2024-7409 has a CVSS v3.1 score of 7.5 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

How do I check if I'm vulnerable to CVE-2024-7409? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-32644 9.1

Evmos is a scalable, high-throughput Proof-of-Stake EVM blockchain that is fully compatible and interoperable with Ethereum. Prior to 17.0.0, there …

CVE-2025-27104 7.5

vyper is a Pythonic Smart Contract Language for the EVM. Multiple evaluation of a single expression is possible in the …

CVE-2024-30387 6.5

A Missing Synchronization vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on ACX5448 and ACX710 allows …

CVE-2021-46939 5.5

In the Linux kernel, the following vulnerability has been resolved: tracing: Restructure trace_clock_global() to never block It was reported that …

CVE-2024-58131 4.0

FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a …

CVE-2026-13489 3.1

A weakness has been identified in 78 xiaozhi-esp32 up to 2.2.6. Affected by this issue is the function ParseMessage of …