PT-2021-6089 · Qemu+10 · Qemu+10

Alexander Bulekov · Published 2021-08-27 · Updated 2024-06-15 · CVE-2021-3748

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description A use-after-free issue was found in the virtio-net device of QEMU. This could occur when the descriptor's address belongs to the non direct access region, due to num buffers being set after the virtqueue element has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting in a denial of service condition, or potentially execute code on the host with the privileges of the QEMU process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2022:1759

ALT-PU-2021-3286

ALT-PU-2021-3363

ALT-PU-2021-3585

ALT-PU-2022-2062

ALT-PU-2022-3390

AZL-9121

BDU:2022-00753

CESA-2022_1759

CVE-2021-3748

DLA-2970-1

DLA-3099-1

DSA-4980-1

OESA-2021-1371

OPENSUSE-SU-2021:1461-1

OPENSUSE-SU-2021:3604-1

OPENSUSE-SU-2021:3605-1

OPENSUSE-SU-2021:3614-1

OPENSUSE-SU-2021_1461-1

OPENSUSE-SU-2021_3604-1

OPENSUSE-SU-2021_3605-1

OPENSUSE-SU-2021_3614-1

OPENSUSE-SU-2024:11597-1

RHSA-2021:4112

RHSA-2021:5036

RHSA-2022:1759

RHSA-2022_1759

RLSA-2022:1759

SUSE-SU-2021:3519-1

SUSE-SU-2021:3604-1

SUSE-SU-2021:3605-1

SUSE-SU-2021:3613-1

SUSE-SU-2021:3614-1

SUSE-SU-2021:3635-1

SUSE-SU-2021:3653-1

USN-5307-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Qemu

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 253

• https://github.com/qemu/qemu/commit/bedd7e93d01961fcb16a97ae45d93acf357e11f6 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-3748 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-3748 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:11597-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3546 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-1759.html · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2022:1759 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3748 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-3748 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3605-1 · Vendor Advisory
• https://lists.nongnu.org/archive/html/qemu-devel/2021-09/msg00388.html · Patch
• https://osv.dev/vulnerability/SUSE-SU-2021:3519-1 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2022-1759.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4158 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3713 · Vendor Advisory