CVE-2021-3545: Infoleak
An information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw exists in virglcmdgetcapsetinfo() in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest could exploit this issue to leak memory from the host.
Other sources
An information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU. The flaw exists in virglcmdgetcapsetinfo() in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest could exploit this issue to leak memory from the host.
Patch series: https://lists.nongnu.org/archive/html/qemu-devel/2021-05/msg04536.html
Memory disclosure in virglcmdgetcapsetinfo() in virgl.c: https://lists.nongnu.org/archive/html/qemu-devel/2021-05/msg04539.html
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/qemuto a version that resolves this vulnerability.Fixed in 1:5.2+dfsg-11+deb11u3Fixed in 1:5.2+dfsg-11+deb11u2Fixed in 1:7.2+dfsg-7+deb12u12Fixed in 1:9.2.2+ds-1Fixed in 1:10.0.0~rc2+ds-2 - Upgrade
Upgrade
qemu/virtio vhost-user GPU device (vhost-user-gpu)to a version that resolves this vulnerability.Fixed in 6.0
Event History
Frequently Asked Questions
What is the vulnerability ID for this information disclosure vulnerability?
The vulnerability ID for this information disclosure vulnerability is CVE-2021-3545.
What is the severity level of the CVE-2021-3545 vulnerability?
The severity level of the CVE-2021-3545 vulnerability is medium with a CVSS score of 6.5.
Which software versions are affected by the CVE-2021-3545 vulnerability?
The CVE-2021-3545 vulnerability affects QEMU versions up to and including 6.0.
How can I fix the CVE-2021-3545 vulnerability?
To fix the CVE-2021-3545 vulnerability, update QEMU to version 6.2 or higher.
Where can I find more information about the CVE-2021-3545 vulnerability?
You can find more information about the CVE-2021-3545 vulnerability at the following references: [link1], [link2], [link3].