CVE-2021-3409: Buffer Overflow
Last updated 24 July 2024
Other sources
The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this.
— Launchpad
Upstream commit [1] was supposed to fix CVE-2020-17380 and CVE-2020-25085, both involving a heap buffer overflow in the SDHCI controller emulation of QEMU. In fact, it turned out it was still possible to reproduce the same issue with specially crafted input, inducing a bogus transfer and subsequent out-of-bounds read/write access in sdhcidoadma() or sdhcisdmatransfermultiblocks().
[1] https://git.qemu.org/?p=qemu.git;a=commit;h=dfba99f17feb6d4a129da19d38df1bcd8579d1c3
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/qemuto a version that resolves this vulnerability.Fixed in 1:5.2+dfsg-11+deb11u3Fixed in 1:5.2+dfsg-11+deb11u2Fixed in 1:7.2+dfsg-7+deb12u12Fixed in 1:10.0.0~rc2+ds-2Fixed in 1:10.0.0~rc3+ds-2 - Upgrade
Upgrade
qemuto a version that resolves this vulnerability.Fixed in 5.2.0 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch dfba99f17feb6d4a129da19d38df1bcd8579d1c3
Event History
Frequently Asked Questions
What is CVE-2021-3409?
CVE-2021-3409 is a vulnerability in QEMU that allows a malicious guest to crash the QEMU process on the host.
Which software is affected by CVE-2021-3409?
QEMU versions up to and including 5.2.0, Red Hat Enterprise Linux 7.0, Fedora 33, Debian Debian Linux 9.0, and various versions of Ubuntu are affected by CVE-2021-3409.
How severe is CVE-2021-3409?
CVE-2021-3409 has a severity rating of 5.7, which is classified as medium.
How can I fix CVE-2021-3409?
To fix CVE-2021-3409, it is recommended to update to the latest version of QEMU or apply the relevant patches provided by the software vendor.
Where can I find more information about CVE-2021-3409?
More information about CVE-2021-3409 can be found at the following references: [Link 1](https://access.redhat.com/security/cve/CVE-2020-17380), [Link 2](https://access.redhat.com/security/cve/CVE-2020-25085), [Link 3](https://git.qemu.org/?p=qemu.git;a=commit;h=dfba99f17feb6d4a129da19d38df1bcd8579d1c3).