Published: 23/03/2022 Updated: 03/01/2023

CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4

CVSS v3 Base Score: 7.5 | Impact Score: 6 | Exploitability Score: 0.8

VMScore: 615

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

It exists that the QEMU vhost-user GPU device contained several security issues. An attacker inside the guest could use these issues to cause QEMU to crash, resulting in a denial of service, leak sensitive information, or possibly execute arbitrary code. This issue only affected Ubuntu 21.10. (CVE-2021-3544, CVE-2021-3545, CVE-2021-3546)

Vulnerable Product	Search on Vulmon	Subscribe to Product
qemu qemu
debian debian linux 9.0
debian debian linux 10.0
canonical ubuntu linux 18.04
canonical ubuntu linux 20.04
canonical ubuntu linux 21.10
fedoraproject fedora 34
redhat enterprise linux 8.0
redhat enterprise linux advanced virtualization eus 8.4

Synopsis Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for the virt:rhel and virt-devel:rhel modules is now available for Red Ha ...

Debian Bug report logs - #993401 qemu: CVE-2021-3748: virtio-net: heap use-after-free in virtio_net_receive_rcu Package: src:qemu; Maintainer for src:qemu is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 31 Aug 2021 19:39:02 UTC Severity: i ...

Several security issues were fixed in QEMU ...

Multiple security issues were discovered in QEMU, a fast processor emulator, which could result in denial of service or the the execution of arbitrary code For the stable distribution (bullseye), these problems have been fixed in version 1:52+dfsg-11+deb11u1 We recommend that you upgrade your qemu packages For the detailed security status of qe ...

OSS-Fuzz found a use-after-free vulnerability in virtio-net It occurs in the iov_from_buf_full function under these conditions: 1) the (malicious) driver tries to add a non direct memory region as the buffer address 2) then memory core needs to use the bounce buffer 3) virtio-net tries to set the num_buffers *after* the iov is unmapped (bounce bu ...

CWE-416 https://github.com/qemu/qemu/commit/bedd7e93d01961fcb16a97ae45d93acf357e11f6 https://ubuntu.com/security/CVE-2021-3748 https://bugzilla.redhat.com/show_bug.cgi?id=1998514 https://lists.nongnu.org/archive/html/qemu-devel/2021-09/msg00388.html https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html https://security.netapp.com/advisory/ntap-20220425-0004/https://security.gentoo.org/glsa/202208-27 https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html https://access.redhat.com/errata/RHSA-2022:1759 https://ubuntu.com/security/notices/USN-5307-1 https://nvd.nist.gov

CVE-2021-3748

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect