Unrated severityNVD Advisory· Published May 6, 2021· Updated Aug 3, 2024

CVE-2021-3507

Description

A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario, or potential information leakage from the host memory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

QEMU/Qemullm-fuzzy2 versions
<=6.0.0+ 1 more
- (no CPE)range: <=6.0.0
- (no CPE)range: up to 6.0.0 (including)
osv-coords53 versions
pkg:rpm/almalinux/qemu-guest-agent pkg:rpm/almalinux/qemu-img pkg:rpm/almalinux/qemu-kvm pkg:rpm/almalinux/qemu-kvm-audio-pa pkg:rpm/almalinux/qemu-kvm-block-curl pkg:rpm/almalinux/qemu-kvm-block-rbd pkg:rpm/almalinux/qemu-kvm-common pkg:rpm/almalinux/qemu-kvm-core pkg:rpm/almalinux/qemu-kvm-device-display-virtio-gpu pkg:rpm/almalinux/qemu-kvm-device-display-virtio-gpu-ccw pkg:rpm/almalinux/qemu-kvm-device-display-virtio-gpu-gl pkg:rpm/almalinux/qemu-kvm-device-display-virtio-gpu-pci pkg:rpm/almalinux/qemu-kvm-device-display-virtio-gpu-pci-gl pkg:rpm/almalinux/qemu-kvm-device-display-virtio-vga pkg:rpm/almalinux/qemu-kvm-device-display-virtio-vga-gl pkg:rpm/almalinux/qemu-kvm-device-usb-host pkg:rpm/almalinux/qemu-kvm-device-usb-redirect pkg:rpm/almalinux/qemu-kvm-docs pkg:rpm/almalinux/qemu-kvm-tools pkg:rpm/almalinux/qemu-kvm-ui-egl-headless pkg:rpm/almalinux/qemu-kvm-ui-opengl pkg:rpm/almalinux/qemu-pr-helper pkg:rpm/opensuse/qemu&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/qemu&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/qemu&distro=openSUSE%20Leap%20Micro%205.3 pkg:rpm/opensuse/qemu-linux-user&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/qemu-testsuite&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/qemu&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/qemu&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/qemu&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP4 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/qemu&distro=SUSE%20Manager%20Proxy%204.2 pkg:rpm/suse/qemu&distro=SUSE%20Manager%20Server%204.2
< 17:7.0.0-13.el9+ 52 more
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 17:7.0.0-13.el9
- (no CPE)range: < 3.1.1.1-150100.80.43.2
- (no CPE)range: < 4.2.1-150200.72.2
- (no CPE)range: < 6.2.0-150400.37.14.2
- (no CPE)range: < 6.2.0-150400.37.14.1
- (no CPE)range: < 6.2.0-150400.37.14.1
- (no CPE)range: < 3.1.1.1-150100.80.43.2
- (no CPE)range: < 4.2.1-150200.72.2
- (no CPE)range: < 5.2.0-150300.121.2
- (no CPE)range: < 3.1.1.1-150100.80.43.2
- (no CPE)range: < 3.1.1.1-150100.80.43.2
- (no CPE)range: < 4.2.1-150200.72.2
- (no CPE)range: < 5.2.0-150300.121.2
- (no CPE)range: < 5.2.0-150300.121.2
- (no CPE)range: < 5.2.0-150300.121.2
- (no CPE)range: < 5.2.0-150300.121.2
- (no CPE)range: < 6.2.0-150400.37.14.2
- (no CPE)range: < 6.2.0-150400.37.14.2
- (no CPE)range: < 6.2.0-150400.37.14.2
- (no CPE)range: < 6.2.0-150400.37.14.2
- (no CPE)range: < 5.2.0-150300.121.2
- (no CPE)range: < 3.1.1.1-66.1
- (no CPE)range: < 3.1.1.1-150100.80.43.2
- (no CPE)range: < 3.1.1.1-150100.80.43.2
- (no CPE)range: < 4.2.1-150200.72.2
- (no CPE)range: < 5.2.0-150300.121.2
- (no CPE)range: < 3.1.1.1-66.1
- (no CPE)range: < 3.1.1.1-150100.80.43.2
- (no CPE)range: < 4.2.1-150200.72.2
- (no CPE)range: < 5.2.0-150300.121.2
- (no CPE)range: < 5.2.0-150300.121.2
- (no CPE)range: < 5.2.0-150300.121.2

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cgimitrex_refsource_MISC
lists.debian.org/debian-lts-announce/2022/09/msg00008.htmlmitremailing-listx_refsource_MLIST
security.netapp.com/advisory/ntap-20210528-0005/mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000