Vulnerability · Published May 6, 2021 · Assigned by redhat
CVE-2021-3507
Medium 6.1
In plain English
A medium-severity memory corruption in QEMU. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)6.1Medium
Exploit odds (30 days)0.5%top 57.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario, or potential information leakage from the host memory.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | qemu-guest-agent | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-img | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-audio-pa | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-block-curl | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-block-rbd | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-common | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-core | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu-ccw | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu-gl | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu-pci | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu-pci-gl | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-vga | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-vga-gl | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-device-usb-host | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-device-usb-redirect | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-docs | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-tools | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-ui-egl-headless | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-kvm-ui-opengl | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| AlmaLinux:9 | qemu-pr-helper | 17:7.0.0-13.el9 | ALSA-2022:7967 |
| Alpine:v3.20 | qemu | 6.1.0-r0 | ALPINE-CVE-2021-3507 |
| Alpine:v3.21 | qemu | 6.1.0-r0 | ALPINE-CVE-2021-3507 |
| Alpine:v3.22 | qemu | 6.1.0-r0 | ALPINE-CVE-2021-3507 |
| Alpine:v3.23 | qemu | 6.1.0-r0 | ALPINE-CVE-2021-3507 |
| Alpine:v3.24 | qemu | 6.1.0-r0 | ALPINE-CVE-2021-3507 |
| Debian:12 | qemu | 1:7.1+dfsg-1 | DEBIAN-CVE-2021-3507 |
| Debian:13 | qemu | 1:7.1+dfsg-1 | DEBIAN-CVE-2021-3507 |
| Debian:14 | qemu | 1:7.1+dfsg-1 | DEBIAN-CVE-2021-3507 |
| Rocky Linux:8 | hivex | 0:1.3.18-23.module+el8.7.0+1084+97b81f61 | RLSA-2022:7472 |
| Rocky Linux:8 | hivex | 0:1.3.18-23.module+el8.6.0+847+b490afdd | RLSA-2022:7472 |
| Rocky Linux:8 | libguestfs | 1:1.44.0-9.module+el8.7.0+1084+97b81f61.rocky | RLSA-2022:7472 |
| Rocky Linux:8 | libguestfs-winsupport | 0:8.6-1.module+el8.6.0+847+b490afdd | RLSA-2022:7472 |
| Rocky Linux:8 | libguestfs-winsupport | 0:8.6-1.module+el8.7.0+1084+97b81f61 | RLSA-2022:7472 |
| Rocky Linux:8 | libiscsi | 0:1.18.0-8.module+el8.6.0+847+b490afdd | RLSA-2022:7472 |
| Rocky Linux:8 | libiscsi | 0:1.18.0-8.module+el8.4.0+534+4680a14e | RLSA-2022:7472 |
| Rocky Linux:8 | libiscsi | 0:1.18.0-8.module+el8.7.0+1084+97b81f61 | RLSA-2022:7472 |
| Rocky Linux:8 | libnbd | 0:1.6.0-5.module+el8.6.0+847+b490afdd | RLSA-2022:7472 |
| Rocky Linux:8 | libnbd | 0:1.6.0-5.module+el8.7.0+1084+97b81f61 | RLSA-2022:7472 |
| Rocky Linux:8 | libtpms | 0:0.9.1-1.20211126git1ff6fe1f43.module+el8.7.0+1084+97b81f61 | RLSA-2022:7472 |
| Rocky Linux:8 | libvirt | 0:8.0.0-10.module+el8.7.0+1084+97b81f61 | RLSA-2022:7472 |
| Rocky Linux:8 | libvirt-dbus | 0:1.3.0-2.module+el8.7.0+1084+97b81f61 | RLSA-2022:7472 |
| Rocky Linux:8 | libvirt-dbus | 0:1.3.0-2.module+el8.6.0+847+b490afdd | RLSA-2022:7472 |
| Rocky Linux:8 | libvirt-dbus | 0:1.3.0-2.module+el8.4.0+534+4680a14e | RLSA-2022:7472 |
| Rocky Linux:8 | libvirt-python | 0:8.0.0-2.module+el8.7.0+1084+97b81f61 | RLSA-2022:7472 |
| Rocky Linux:8 | nbdkit | 0:1.24.0-4.module+el8.6.0+847+b490afdd | RLSA-2022:7472 |
| Rocky Linux:8 | netcf | 0:0.2.8-12.module+el8.7.0+1084+97b81f61 | RLSA-2022:7472 |
| Rocky Linux:8 | netcf | 0:0.2.8-12.module+el8.6.0+847+b490afdd | RLSA-2022:7472 |
| Rocky Linux:8 | netcf | 0:0.2.8-12.module+el8.4.0+534+4680a14e | RLSA-2022:7472 |
| Rocky Linux:8 | perl-Sys-Virt | 0:8.0.0-1.module+el8.7.0+1084+97b81f61 | RLSA-2022:7472 |
| Rocky Linux:8 | perl-Sys-Virt | 0:8.0.0-1.module+el8.6.0+847+b490afdd | RLSA-2022:7472 |
| Rocky Linux:8 | qemu-kvm | 5:6.2.0-20.module+el8.7.0+1084+97b81f61.2 | RLSA-2022:7472 |
| Rocky Linux:9 | qemu-kvm | 7:7.0.0-13.el9 | RLSA-2022:7967 |
| Rocky Linux:8 | seabios | 0:1.16.0-3.module+el8.7.0+1084+97b81f61 | RLSA-2022:7472 |
| Rocky Linux:8 | sgabios | 1:0.20170427git-3.module+el8.6.0+847+b490afdd | RLSA-2022:7472 |
| Rocky Linux:8 | sgabios | 1:0.20170427git-3.module+el8.4.0+534+4680a14e | RLSA-2022:7472 |
| Rocky Linux:8 | sgabios | 1:0.20170427git-3.module+el8.7.0+1084+97b81f61 | RLSA-2022:7472 |
| Rocky Linux:8 | supermin | 0:5.2.1-2.module+el8.7.0+1084+97b81f61 | RLSA-2022:7472 |
| Rocky Linux:8 | swtpm | 0:0.7.0-4.20211109gitb79fd91.module+el8.7.0+1084+97b81f61 | RLSA-2022:7472 |
| Rocky Linux:8 | virt-v2v | 1:1.42.0-21.module+el8.7.0+1084+97b81f61 | RLSA-2022:7472 |
| Ubuntu:22.04:LTS | qemu | 1:6.2+dfsg-2ubuntu6.2 | USN-5489-1 |
| Ubuntu:22.04:LTS | qemu | 1:6.2+dfsg-2ubuntu6.2 | UBUNTU-CVE-2021-3507 |
Affected products (as reported)
Weakness: CWE-119
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1951118 x_refsource_MISC
- https://security.netapp.com/advisory/ntap-20210528-0005/ x_refsource_CONFIRM
- [debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update mailing-list, x_refsource_MLIST