CVE-2021-3713 is an out-of-bounds write vulnerability in the USB Attached SCSI (UAS) device emulation of QEMU, affecting versions prior to 6.2.0-rc0. A malicious guest user can exploit this flaw by providing an unchecked stream number, leading to out-of-bounds access to internal QEMU data structures. This can result in a denial-of-service (crashing QEMU) or potentially arbitrary code execution on the host with the privileges of the QEMU process. Rated with a CVSS score of 7.4 (HIGH), this vulnerability has a low attack complexity and requires local privileges on the guest. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 6.1.0CPE matchmatch criteria | cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:* | ||
9.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* | ||
10.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | ||
11.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.0 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
CVE-2021-3713
Mar 14, 2023QEMU: out-of-bounds write in UAS (USB Attached SCSI) device emulation
Aug 17, 2021An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.
Aug 10, 2021