DeutschShown in its original language — a full translation is planned for a future version.
QEMU: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes
view advisory published 2021-08-05
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in QEMU ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen und einen Denial of Service Zustand herzustellen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-3682US | high8.5 | — | ||
A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfer from a SPICE client due to th… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2021-9638 vom 2022-01-04external
- Red Hat Customer Portal vom 2021-08-05external
- Red Hat Bugzilla - Bug 1989651 vom 2021-08-05external
- Oracle Linux Security Advisory ELSA-2022-9172 vom 2022-02-25external
- Oracle Linux Security Advisory ELSA-2024-12604 vom 2024-09-02external
- Oracle Linux Security Advisory ELSA-2024-12605 vom 2024-09-02external
- Debian Security Advisory DLA-2753 vom 2021-09-02external
- Debian Security Advisory DLA-3099 vom 2022-09-05external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan