CVE-2021-3930
Summary
| CVE | CVE-2021-3930 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-02-18 18:15:00 UTC |
|---|
| Updated | 2022-10-25 20:11:00 UTC |
|---|
| Description | An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in mode_sense_page() if the 'page' argument was set to MODE_PAGE_ALLS (0x3f). A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service condition. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [SECURITY] [DLA 3099-1] qemu security update |
MLIST |
lists.debian.org |
|
| CVE-2021-3930 QEMU Vulnerability in NetApp Products | NetApp Product Security |
CONFIRM |
security.netapp.com |
|
| QEMU: Multiple Vulnerabilities (GLSA 202208-27) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| [SECURITY] [DLA 2970-1] qemu security update |
MLIST |
lists.debian.org |
|
| 2020588 – (CVE-2021-3930) CVE-2021-3930 QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c |
MISC |
bugzilla.redhat.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159578 Oracle Enterprise Linux Security Update for virt:ol and virt-devel:rhel (ELSA-2021-5238)
- 159582 Oracle Enterprise Linux Security Update for qemu (ELSA-2021-9638)
- 159672 Oracle Enterprise Linux Security Update for kvm_utils (ELSA-2022-9172)
- 179172 Debian Security Update for qemu (DLA 2970-1)
- 180995 Debian Security Update for qemu (DLA 3099-1)
- 181881 Debian Security Update for qemu (CVE-2021-3930)
- 198683 Ubuntu Security Notification for QEMU Vulnerabilities (USN-5307-1)
- 199069 Ubuntu Security Notification for QEMU Vulnerabilities (USN-5772-1)
- 239978 Red Hat Update for virt:rhel and virt-devel:rhel (RHSA-2021:5238)
- 355320 Amazon Linux Security Advisory for qemu : ALAS2-2023-2061
- 377413 Alibaba Cloud Linux Security Update for virt:rhel and virt-devel:rhel (ALINUX3-SA-2022:0119)
- 502168 Alpine Linux Security Update for qemu
- 710604 Gentoo Linux QEMU Multiple Vulnerabilities (GLSA 202208-27)
- 751920 OpenSUSE Security Update for qemu (openSUSE-SU-2022:0930-1)
- 752009 SUSE Enterprise Linux Security Update for qemu (SUSE-SU-2022:0930-1)
- 752033 SUSE Enterprise Linux Security Update for qemu (SUSE-SU-2022:1151-1)
- 900696 Common Base Linux Mariner (CBL-Mariner) Security Update for qemu-kvm (8687)
- 901383 Common Base Linux Mariner (CBL-Mariner) Security Update for qemu (8671)
- 902097 Common Base Linux Mariner (CBL-Mariner) Security Update for qemu (8671-1)
- 940065 AlmaLinux Security Update for virt:rhel and virt-devel:rhel (ALSA-2021:5238)
- 960270 Rocky Linux Security Update for virt:rhel and virt-devel:rhel (RLSA-2021:5238)
