CVE-2021-20203

Katalog CVE

CVSS 3.2 · Low EPSS 0,59%

Kerentanan Integer Overflow or Wraparound pada qemu, fedoraproject fedora +1 lainnya. Skor CVSS 3.1 3.2 (Low) menurut NVD.

Deskripsi (NVD)

An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.

Rincian

Terbit di NVD

25 Februari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.2 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

0,59% peluang dieksploitasi; lebih tinggi dari 46,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugs.launchpad.net/qemu/+bug/1913873 exploit · patch · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=1922441 issue tracking · patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202208-27 advisory pihak ketiga