Log in Start free

Vulnerability · Published Mar 23, 2021 · Assigned by redhat

CVE-2021-3392

Low 3.2

In plain English

A low-severity use-after-free in QEMU. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)3.2Low
Exploit odds (30 days)0.4%top 60.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A use-after-free flaw was found in the MegaRAID emulator of QEMU. This issue occurs while processing SCSI I/O requests in the case of an error mptsas_free_request() that does not dequeue the request object 'req' from a pending requests queue. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. Versions between 2.10.0 and 5.2.0 are potentially affected.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20qemu6.0.0-r1ALPINE-CVE-2021-3392
Alpine:v3.21qemu6.0.0-r1ALPINE-CVE-2021-3392
Alpine:v3.22qemu6.0.0-r1ALPINE-CVE-2021-3392
Alpine:v3.23qemu6.0.0-r1ALPINE-CVE-2021-3392
Alpine:v3.24qemu6.0.0-r1ALPINE-CVE-2021-3392
Debian:12qemu1:5.2+dfsg-10DEBIAN-CVE-2021-3392
Debian:13qemu1:5.2+dfsg-10DEBIAN-CVE-2021-3392
Debian:14qemu1:5.2+dfsg-10DEBIAN-CVE-2021-3392

Affected products (as reported)

VendorProductVersions
n/a QEMU between 2.10.0 and 5.2.0

Weakness: CWE-416

References