An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host resulting in a denial of service condition or potential code execution with the privileges of the QEMU process.

🗓️ 10 Jun 2021 07:00:00Reported by MicrosoftType

Out-of-bounds write in QEMU vhost-user-gpu may crash host or enable code execution via capset command.

Reporter	Title	Published	Views	Family All 94
ATTACKERKB	CVE-2021-3546	2 Jun 202114:15	–	attackerkb
AlpineLinux	CVE-2021-3546	2 Jun 202113:30	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в qemu	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the VIRTIO_GPU_CMD_GET_CAPSET command in the QEMU hardware emulation software involves writing beyond the buffer boundaries. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.	21 Dec 202100:00	–	bdu_fstec
CBLMariner	CVE-2021-3546 affecting package qemu-kvm 4.2.0-48	11 Aug 202106:39	–	cbl_mariner
CNNVD	QEMU 缓冲区错误漏洞	31 May 202100:00	–	cnnvd
CNVD	QEMU Buffer Overflow Vulnerability (CNVD-2021-39109)	2 Jun 202100:00	–	cnvd
CVE	CVE-2021-3546	2 Jun 202113:30	–	cve
Cvelist	CVE-2021-3546	2 Jun 202113:30	–	cvelist
Debian	[SECURITY] [DSA 4980-1] qemu security update	3 Oct 202118:26	–	debian