CVE-2021-3930: Medium severity qemu vulnerability
An off-by-one error was found in the SCSI Device emulation in QEMU. It could occur in hw/scsi/scsi-disk.c:modesensepage() while processing MODE SELECT commands if 'page' was set to MODEPAGEALLS (0x3f). Specifically, 'page' was used to index the stack-allocated 'modesensevalid' buffer (size=0x3f), causing an off-by-one error when trying to access the last element. A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service condition.
Other sources
An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in modesensepage() if the 'page' argument was set to MODEPAGEALLS (0x3f). A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service condition.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-3930?
CVE-2021-3930 is an off-by-one error found in the SCSI device emulation in QEMU.
How does CVE-2021-3930 affect QEMU?
CVE-2021-3930 could potentially crash QEMU, resulting in a denial of service condition.
Which software versions are affected by CVE-2021-3930?
QEMU versions up to and excluding 6.2.0 are affected by CVE-2021-3930.
What is the severity of CVE-2021-3930?
CVE-2021-3930 has a severity rating of 6.5 (medium).
Where can I find more information about CVE-2021-3930?
You can find more information about CVE-2021-3930 on the Red Hat Bugzilla and NetApp security advisory websites, as well as the Debian LTS announce mailing list.