CVE-2021-3546 — Out-of-bounds Write in Qemu

CWE-787 — Out-of-bounds Write10 documents7 sources
Severity
8.2HIGHNVD
OSV6.5OSV2.3
EPSS
0.0%
top 86.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
QemuDebian QemuDebian Linux+1 more
Timeline
PublishedJun 2
Latest updateMay 24

Description

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service condition, or potential code execution with the privileges of the QEMU process.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 1.5 | Impact: 6.0

Affected Packages6 packages

▶debiandebian/qemu< qemu 1:6.1+dfsg-1 (bookworm)
▶Debianqemu/qemu< 1:5.2+dfsg-11+deb11u1+3
▶Ubuntuqemu/qemu< 1:2.11+dfsg-1ubuntu7.37+3
▶NVDqemu/qemu6.0.0
▶CVEListV5qemu/qemuAll QEMU versions up to and including 6.0

Also affects: Debian Linux 11.0

🔴Vulnerability Details

4
GHSA
GHSA-m53p-4wch-f983: A flaw was found in vhost-user-gpu of QEMU in versions up to and including 6↗2022-05-24
▶
OSV
qemu vulnerabilities↗2022-02-28
▶
OSV
qemu vulnerabilities↗2021-07-15
▶
OSV
CVE-2021-3546: An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6↗2021-06-02
▶

📋Vendor Advisories

5
Ubuntu
QEMU vulnerabilities↗2022-02-28
▶
Ubuntu
QEMU vulnerabilities↗2021-07-15
▶
Microsoft
An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GE↗2021-06-08
▶
Red Hat
QEMU: vhost-user-gpu: out-of-bounds write in virgl_cmd_get_capset()↗2021-05-04
▶
Debian
CVE-2021-3546: qemu - An out-of-bounds write vulnerability was found in the virtio vhost-user GPU devi...↗2021
▶