PT-2021-7354 · Qemu+5 · Qemu+5

Victorv · Published 2021-06-17 · Updated 2024-06-15 · CVE-2021-3607

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 6.1.0

Description The issue is related to an integer overflow in the QEMU implementation of VMWare's paravirtual RDMA device. It occurs due to improper input validation while handling a "PVRDMA REG DSRHIGH" write from the guest. This allows a privileged guest user to cause QEMU to allocate a large amount of memory, resulting in a denial of service. The highest threat from this issue is to system availability.

Recommendations For versions prior to 6.1.0, update to version 6.1.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the paravirtual RDMA device to minimize the risk of exploitation.

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2021-2713

ALT-PU-2021-3363

BDU:2022-05775

CVE-2021-3607

DLA-3099-1

OESA-2022-1617

OPENSUSE-SU-2021:1202-1

OPENSUSE-SU-2021:2442-1

OPENSUSE-SU-2021:2474-1

OPENSUSE-SU-2021:2591-1

OPENSUSE-SU-2021_1202-1

OPENSUSE-SU-2021_2442-1

OPENSUSE-SU-2021_2474-1

OPENSUSE-SU-2021_2591-1

OPENSUSE-SU-2024:11287-1

SUSE-SU-2021:2442-1

SUSE-SU-2021:2448-1

SUSE-SU-2021:2474-1

SUSE-SU-2021:2591-1

USN-5010-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Qemu

Suse

Ubuntu

References · 225

• https://ubuntu.com/security/CVE-2021-3527 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3392 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-35505 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3607 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2021:2591-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3546 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-9568.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:2442-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-3607 · Security Note
• https://ubuntu.com/security/notices/USN-5010-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3594 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-3607 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:1202-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-0819SE17 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3595 · Vendor Advisory