Vulnerability · Published May 13, 2021 · Assigned by redhat
CVE-2021-20181
High 7.5
In plain English
A high-severity security flaw in qemu. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)0.3%top 73.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2.0. This flaw allows a malicious 9p client to cause a use-after-free error, potentially escalating their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity as well as system availability.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.20 | qemu | 6.0.0-r1 | ALPINE-CVE-2021-20181 |
| Alpine:v3.21 | qemu | 6.0.0-r1 | ALPINE-CVE-2021-20181 |
| Alpine:v3.22 | qemu | 6.0.0-r1 | ALPINE-CVE-2021-20181 |
| Alpine:v3.23 | qemu | 6.0.0-r1 | ALPINE-CVE-2021-20181 |
| Alpine:v3.24 | qemu | 6.0.0-r1 | ALPINE-CVE-2021-20181 |
| Debian:12 | qemu | 1:5.2+dfsg-4 | DEBIAN-CVE-2021-20181 |
| Debian:13 | qemu | 1:5.2+dfsg-4 | DEBIAN-CVE-2021-20181 |
| Debian:14 | qemu | 1:5.2+dfsg-4 | DEBIAN-CVE-2021-20181 |
Affected products (as reported)
Weakness: CWE-367
References
- https://www.zerodayinitiative.com/advisories/ZDI-21-159/ x_refsource_MISC
- [debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update mailing-list, x_refsource_MLIST
- https://bugzilla.redhat.com/show_bug.cgi?id=1927007 x_refsource_MISC
- https://security.netapp.com/advisory/ntap-20210720-0009/ x_refsource_CONFIRM
- [debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update mailing-list, x_refsource_MLIST