VDB
DEBIAN-CVE-2021-3409
DEBIAN-CVE-2021-3409
PUBLISHED
CVSS 5.699999809265137 MEDIUM
The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this.
Risk Scores
CVSS 3.1
5.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | qemu | 0, 0, 0 |
| Debian:12 | qemu | 0, 0, 0 |
| Debian:14 | qemu | 0, 0, 0 |
| Debian:13 | qemu | 0, 0, 0 |
Timeline
- Mar 23, 2021 CVE Published
- Apr 28, 2026 CVE Updated