Логотип exploitDog
bind:"GHSA-m53p-4wch-f983" OR bind:"CVE-2021-3546"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-m53p-4wch-f983" OR bind:"CVE-2021-3546"

Количество 13

Количество 13

github логотип

GHSA-m53p-4wch-f983

больше 3 лет назад

A flaw was found in vhost-user-gpu of QEMU in versions up to and including 6.0. An out-of-bounds write vulnerability can allow a malicious guest to crash the QEMU process on the host resulting in a denial of service or potentially execute arbitrary code on the host with the privileges of the QEMU process. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 8.2
EPSS: Низкий
ubuntu логотип

CVE-2021-3546

больше 4 лет назад

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service condition, or potential code execution with the privileges of the QEMU process.

CVSS3: 8.2
EPSS: Низкий
redhat логотип

CVE-2021-3546

больше 4 лет назад

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service condition, or potential code execution with the privileges of the QEMU process.

CVSS3: 8.2
EPSS: Низкий
nvd логотип

CVE-2021-3546

больше 4 лет назад

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service condition, or potential code execution with the privileges of the QEMU process.

CVSS3: 8.2
EPSS: Низкий
msrc логотип

CVE-2021-3546

больше 4 лет назад

CVSS3: 8.2
EPSS: Низкий
debian логотип

CVE-2021-3546

больше 4 лет назад

An out-of-bounds write vulnerability was found in the virtio vhost-use ...

CVSS3: 8.2
EPSS: Низкий
fstec логотип

BDU:2021-06308

больше 4 лет назад

Уязвимость команды VIRTIO_GPU_CMD_GET_CAPSET эмулятора аппаратного обеспечения QEMU, связанная с записью за границами буфера, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 8.2
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:2213-1

около 4 лет назад

Security update for qemu

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:2213-1

больше 4 лет назад

Security update for qemu

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:2212-1

больше 4 лет назад

Security update for qemu

EPSS: Низкий
oracle-oval логотип

ELSA-2021-9425

около 4 лет назад

ELSA-2021-9425: qemu security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:1043-1

около 4 лет назад

Security update for qemu

EPSS: Низкий
oracle-oval логотип

ELSA-2021-9568

почти 4 года назад

ELSA-2021-9568: virt:kvm_utils security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-m53p-4wch-f983

A flaw was found in vhost-user-gpu of QEMU in versions up to and including 6.0. An out-of-bounds write vulnerability can allow a malicious guest to crash the QEMU process on the host resulting in a denial of service or potentially execute arbitrary code on the host with the privileges of the QEMU process. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 8.2
0%
Низкий
больше 3 лет назад
ubuntu логотип
CVE-2021-3546

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service condition, or potential code execution with the privileges of the QEMU process.

CVSS3: 8.2
0%
Низкий
больше 4 лет назад
redhat логотип
CVE-2021-3546

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service condition, or potential code execution with the privileges of the QEMU process.

CVSS3: 8.2
0%
Низкий
больше 4 лет назад
nvd логотип
CVE-2021-3546

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service condition, or potential code execution with the privileges of the QEMU process.

CVSS3: 8.2
0%
Низкий
больше 4 лет назад
msrc логотип
CVSS3: 8.2
0%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-3546

An out-of-bounds write vulnerability was found in the virtio vhost-use ...

CVSS3: 8.2
0%
Низкий
больше 4 лет назад
fstec логотип
BDU:2021-06308

Уязвимость команды VIRTIO_GPU_CMD_GET_CAPSET эмулятора аппаратного обеспечения QEMU, связанная с записью за границами буфера, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 8.2
0%
Низкий
больше 4 лет назад
suse-cvrf логотип
openSUSE-SU-2021:2213-1

Security update for qemu

около 4 лет назад
suse-cvrf логотип
SUSE-SU-2021:2213-1

Security update for qemu

больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2021:2212-1

Security update for qemu

больше 4 лет назад
oracle-oval логотип
ELSA-2021-9425

ELSA-2021-9425: qemu security update (IMPORTANT)

около 4 лет назад
suse-cvrf логотип
openSUSE-SU-2021:1043-1

Security update for qemu

около 4 лет назад
oracle-oval логотип
ELSA-2021-9568

ELSA-2021-9568: virt:kvm_utils security update (IMPORTANT)

почти 4 года назад

Уязвимостей на страницу