PT-2021-7373 · Qemu+5 · Qemu+5

Mauro Matteo Cascella · Published 2021-02-12 · Updated 2026-06-09 · CVE-2021-3409

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description The issue is related to a buffer overflow in the memory of the QEMU hardware emulator. Exploitation of this issue allows an attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2021-1767

BDU:2022-05831

CVE-2021-3409

DLA-2623-1

DLA-3362-1

OESA-2021-1191

OPENSUSE-SU-2021:1942-1

OPENSUSE-SU-2021_1942-1

OPENSUSE-SU-2022_3594-1

OPENSUSE-SU-2022_3768-1

SUSE-SU-2021:1942-1

SUSE-SU-2022:3594-1

SUSE-SU-2022:3768-1

SUSE-SU-2022_3594-1

SUSE-SU-2023:0761-1

USN-5010-1

USN-8412-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Qemu

Suse

Ubuntu

References · 153

• https://ubuntu.com/security/CVE-2021-4206 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3592 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-15863 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-15469 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3607 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8412-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5010-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-3409 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3593 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-9568.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-20221 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0926SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3608 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4207 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-11947 · Vendor Advisory