Lucene search
+L

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory resulting in a denial of service. The highest threat from this vulnerability is to system availability.

🗓️ 05 Mar 2022 08:00:00Reported by MicrosoftType 
mscve
 mscve
🔗 msrc.microsoft.com👁 2 Views

Integer overflow in QEMU VMWare paravirtual RDMA before 6.1.0 lets a privileged guest exhaust memory and cause DoS.

Related
Detection
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2021-3607
24 Feb 202219:15
attackerkb
AstraLinux
Astra Linux – Vulnerability in Qemu
20 May 202605:53
astralinux
BDU FSTEC
The vulnerability of the QEMU hardware emulation software, related to integer overflows, allows a hacker to trigger a service failure.
19 Sep 202200:00
bdu_fstec
CBLMariner
CVE-2021-3607 affecting package qemu-kvm 4.2.0-48
7 Apr 202206:04
cbl_mariner
CNNVD
QEMU 输入验证错误漏洞
17 Jun 202100:00
cnnvd
CVE
CVE-2021-3607
24 Feb 202218:50
cve
Cvelist
CVE-2021-3607
24 Feb 202218:50
cvelist
Debian
[SECURITY] [DLA 3099-1] qemu security update
5 Sep 202203:28
debian
Debian CVE
CVE-2021-3607
24 Feb 202218:50
debiancve
Tenable Nessus
Debian dla-3099 : qemu - security update
5 Sep 202200:00
nessus
Rows per page
Vulners

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

05 Mar 2022 08:00Current
7.2High risk
Vulners AI Score7.2
CVSS 24.9
CVSS 3.16
EPSS0.00299
2