Log in Start free

Vulnerability · Published Jun 2, 2021 · Assigned by redhat

CVE-2021-3546

High 8.2

In plain English

A high-severity out-of-bounds write in QEMU. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)8.2High
Exploit odds (30 days)0.5%top 59.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service condition, or potential code execution with the privileges of the QEMU process.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20qemu6.1.0-r0ALPINE-CVE-2021-3546
Alpine:v3.21qemu6.1.0-r0ALPINE-CVE-2021-3546
Alpine:v3.22qemu6.1.0-r0ALPINE-CVE-2021-3546
Alpine:v3.23qemu6.1.0-r0ALPINE-CVE-2021-3546
Alpine:v3.24qemu6.1.0-r0ALPINE-CVE-2021-3546
Debian:12qemu1:6.1+dfsg-1DEBIAN-CVE-2021-3546
Debian:13qemu1:6.1+dfsg-1DEBIAN-CVE-2021-3546
Debian:14qemu1:6.1+dfsg-1DEBIAN-CVE-2021-3546
Ubuntu:22.04:LTSqemu1:6.2+dfsg-2ubuntu5UBUNTU-CVE-2021-3546

Affected products (as reported)

VendorProductVersions
n/a QEMU All QEMU versions up to and including 6.0

Weakness: CWE-787

References