An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.

🗓️ 10 Mar 2023 08:00:00Reported by MicrosoftType

Out-of-bounds write in USB Attached SCSI emulation before 6.2.0-rc0; unchecked guest stream may access data3.

Reporter	Title	Published	Views	Family All 114
ALT Linux	Security fix for the ALT Linux 10 package qemu version 6.1.1-alt1	1 Mar 202200:00	–	altlinux
ATTACKERKB	CVE-2021-3713	25 Aug 202119:15	–	attackerkb
AlpineLinux	CVE-2021-3713	25 Aug 202118:40	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in Qemu	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the UAS emulation device’s hardware emulation by QEMU, related to writing beyond the buffer boundaries, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.	21 Dec 202100:00	–	bdu_fstec
CBLMariner	CVE-2021-3713 affecting package qemu-kvm 4.2.0-48	22 Sep 202115:16	–	cbl_mariner
CBLMariner	CVE-2021-3713 affecting package qemu for versions less than 6.2.0-2	3 Jun 202217:54	–	cbl_mariner
Circl	CVE-2021-3713	25 Aug 202122:26	–	circl
CNNVD	QEMU 缓冲区错误漏洞	17 Aug 202100:00	–	cnnvd
CVE	CVE-2021-3713	25 Aug 202118:40	–	cve