PT-2021-3572 · Qemu+6 · Qemu+6

Qiang Liu · Published 2021-07-07 · Updated 2024-06-11 · CVE-2021-3638

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati 2d blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2021-3585

ALT-PU-2022-1412

ALT-PU-2022-3429

ALT-PU-2023-1830

ALT-PU-2023-1869

AZL-8975

BDU:2021-03673

CVE-2021-3638

DSA-4980-1

OESA-2022-1995

OESA-2022-1996

OESA-2022-1997

OPENSUSE-SU-2023_3721-1

OPENSUSE-SU-2023_4056-1

OPENSUSE-SU-2023_4662-1

SUSE-SU-2023:3444-1

SUSE-SU-2023:3721-1

SUSE-SU-2023:4056-1

SUSE-SU-2023:4662-1

SUSE-SU-2023_3444-1

SUSE-SU-2023_4056-1

SUSE-SU-2023_4662-1

SUSE-SU-2024:0589-1

USN-6567-1

USN-6567-2

Affected Products

Alt Linux

Astra Linux

Linuxmint

Qemu

Red Os

Suse

Ubuntu

References · 91

• 🔥 https://github.com/QiuhaoLi/CVE-2021-3929-3947 · Exploit
• 🔥 https://lists.nongnu.org/archive/html/qemu-devel/2021-09/msg01682.html · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-3638 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6567-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1544 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3638 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-0819SE17 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-14394 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0926SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-2861 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3180 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3721-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1997 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3638 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03673 · Security Note