CVE-2021-3608 — Vulnetix

CVE-2021-3608 PUBLISHED

Es existiert eine Schwachstelle in QEMU, welche aufgrund einer fehlerhaften Implementierung von VMWare's paravirtuellen RDMA besteht und beim Verarbeiten einer "PVRDMA_REG_DSRHIGH" Schreiboperation des Gast-Systems auftritt. Ein lokaler Angreifer im Gast-System kann diese Schwachstelle ausnutzen, um einen Denial of Service Zustand herbeizuführen.

EPSS 0.04% · 11.5th percentile

Risk Scores

EPSS Score

0.04%

11.5th percentile

Affected Products

Vendor	Product	Versions
Gentoo	Gentoo Linux
Open Source	Open Source QEMU
Ubuntu	Ubuntu Linux
SUSE	SUSE Linux
Debian	Debian Linux
Oracle	Oracle Linux

Timeline

Jun 17, 2021 CVE Published
Feb 25, 2022 EPSS Score
Apr 18, 2022 EPSS Score
Jun 9, 2022 EPSS Score
Aug 1, 2022 EPSS Score
Sep 21, 2022 EPSS Score
Nov 12, 2022 EPSS Score
Jan 3, 2023 EPSS Score
Feb 24, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 17, 2023 EPSS Score
Jun 8, 2023 EPSS Score

References

https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2022-1114.json advisory
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1114 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1973349 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1973383 advisory
https://ubuntu.com/security/notices/USN-5010-1 advisory
https://lists.suse.com/pipermail/sle-security-updates/2021-July/009193.html advisory
https://lists.suse.com/pipermail/sle-security-updates/2021-July/009213.html advisory
https://lists.suse.com/pipermail/sle-security-updates/2021-August/009241.html advisory
http://linux.oracle.com/errata/ELSA-2021-9425.html advisory
https://linux.oracle.com/errata/ELSA-2021-9568.html advisory
https://linux.oracle.com/errata/ELSA-2022-9172.html advisory
https://security.gentoo.org/glsa/202208-27 advisory
https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html advisory
https://linux.oracle.com/errata/ELSA-2024-12605.html advisory
https://linux.oracle.com/errata/ELSA-2024-12604.html advisory

Open in Interactive Console →