CVE-2017-2630

CVE-2017-2630 is a stack buffer overflow vulnerability affecting QEMU versions prior to 2.9 when built with Network Block Device (NBD) client support. A malicious NBD server could exploit this flaw by sending a crafted response to an 'NBD_OPT_LIST' request. This could lead to a denial of service (DoS) or potentially arbitrary code execution on the client host with the privileges of the QEMU process. The vulnerability has a CVSS score of 8.8 (High), indicating a severe impact with high confidentiality, integrity, and availability concerns, and can be exploited remotely with low attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.