Every CVESearch/Get API key

CVE-2021-3419

Security update for xen

No scoreRejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

What each source reports

CVE ListNo score

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

Record
CVE-2021-3419
Updated
2026-11-02
EUVDEUVD-2021-26747No score

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

Record
EUVD-2021-26747
Updated
2026-11-03
NVDNo score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

Record
CVE-2021-3419
Updated
2026-11-02
OSVopenSUSE-SU-2021:1043-1No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • CVE-2021-3546: Fix out-of-bounds write in virgl_cmd_get_capset (bsc#1185981)
  • CVE-2021-3544: Fix memory leaks found in the virtio vhost-user GPU device (bsc#1186010)
  • CVE-2021-3545: Fix information disclosure due to uninitialized memory read (bsc#1185990)
  • CVE-2020-25085: Fix out-of-bounds access issue while doing multi block SDMA (bsc#1176681)
  • CVE-2020-10756: Fix out-of-bounds read information disclosure in icmp6_send_echoreply(bsc#1172380)
  • For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846, CVE-2021-3419, bsc#1182975)

Non-security issues fixed:

  • Fix issue where s390 guest fails to find zipl boot menu index (bsc#1183979)
  • QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290)
  • Host CPU microcode revision will be visible inside VMs when the proper CPU-model is used (jsc#SLE-17785):
  • Fix testsuite error (bsc#1184574)
  • Fix qemu crash with iothread when block commit after snapshot (bsc#1187013)
  • Fix qemu hang while cancelling migrating hugepage vm (bsc#1185591)
  • Use RCU to avoid race during scsi hotplug/hotunplug (bsc#1184574)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2021:1043-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:1942-1No score

Security update for qemu

This update for qemu fixes the following issues:

  • Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a module to what was accepted upstream (bsc#1181103)
  • Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144, CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  • Fix potential privilege escalation in virtiofsd tool (CVE-2021-20263, bsc#1183373)
  • Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)
  • Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  • Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)
  • QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290)
  • For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)
Record
openSUSE-SU-2021:1942-1
Updated
2026-11-02
OSVSUSE-SU-2021:14702-1No score

Security update for xen

This update for xen fixes the following issues:

  • CVE-2021-3419: Fixed a stack overflow induced by infinite recursion issue (bsc#1182975).
  • CVE-2021-20257: Fixed an infinite loop in the e1000 NIC emulator (bsc#1182846)
  • xenstored crashing with segfault (bsc#1182155).
Record
SUSE-SU-2021:14702-1
Updated
2026-11-02
Show 8 moreShow less
OSVSUSE-SU-2021:1829-1No score

Security update for qemu

This update for qemu fixes the following issues:

  • Fix OOB access during mmio operations (CVE-2020-13754, bsc#1172382)
  • Fix sPAPR emulator leaks the host hardware identity (CVE-2019-8934, bsc#1126455)
  • Fix out-of-bounds read information disclosure in icmp6_send_echoreply (CVE-2020-10756, bsc#1172380)
  • Fix out-of-bound heap buffer access via an interrupt ID field (CVE-2021-20221, bsc#1181933)
  • For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2021-20257, bsc#1182846, CVE-2021-3419, bsc#1182975, bsc#1031692, bsc#1094725)
Record
SUSE-SU-2021:1829-1
Updated
2026-11-02
OSVSUSE-SU-2021:1837-1No score

Security update for qemu

This update for qemu fixes the following issues:

  • Fix out-of-bounds access issue while doing multi block SDMA (CVE-2020-25085, bsc#1176681)
  • Fix out-of-bounds read information disclosure in icmp6_send_echoreply (CVE-2020-10756, bsc#1172380)
  • QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290)
  • Change dependency from CONFIG_VFIO back to CONFIG_LINUX (bsc#1179725)
  • For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846, CVE-2021-3419, bsc#1182975)
Record
SUSE-SU-2021:1837-1
Updated
2026-11-02
OSVSUSE-SU-2021:1893-1No score

Security update for qemu

This update for qemu fixes the following issues:

  • CVE-2020-25085: Fix out-of-bounds access issue while doing multi block SDMA (bsc#1176681)
  • CVE-2020-10756: Fix out-of-bounds read information disclosure in icmp6_send_echoreply(bsc#1172380)
  • Fix issue where s390 guest fails to find zipl boot menu index (bsc#1183979)
  • QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290)
  • Host CPU microcode revision will be visible inside VMs when the proper CPU-model is used (jsc#SLE-17785):
  • For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846, CVE-2021-3419, bsc#1182975)
Record
SUSE-SU-2021:1893-1
Updated
2026-11-02
OSVSUSE-SU-2021:1894-1No score

Security update for qemu

This update for qemu fixes the following issues:

  • Fix OOB access during mmio operations (CVE-2020-13754, bsc#1172382)
  • Fix out-of-bounds read information disclosure in icmp6_send_echoreply (CVE-2020-10756, bsc#1172380)
  • Fix out-of-bound heap buffer access via an interrupt ID field (CVE-2021-20221, bsc#1181933)
  • For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2021-20257, bsc#1182846, CVE-2021-3419, bsc#1182975, bsc#1094725)
Record
SUSE-SU-2021:1894-1
Updated
2026-11-02
OSVSUSE-SU-2021:1895-1No score

Security update for qemu

This update for qemu fixes the following issues:

  • Fix OOB access during mmio operations (CVE-2020-13754, bsc#1172382)
  • Fix out-of-bounds read information disclosure in icmp6_send_echoreply (CVE-2020-10756, bsc#1172380)
  • For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846, CVE-2021-3419, bsc#1182975)
Record
SUSE-SU-2021:1895-1
Updated
2026-11-02
OSVSUSE-SU-2021:1918-1No score

Security update for qemu

This update for qemu fixes the following issues:

  • CVE-2020-10756: Fix out-of-bounds read information disclosure in icmp6_send_echoreply (bsc#1172380)
Record
SUSE-SU-2021:1918-1
Updated
2026-11-02
OSVSUSE-SU-2021:1942-1No score

Security update for qemu

This update for qemu fixes the following issues:

  • Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a module to what was accepted upstream (bsc#1181103)
  • Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144, CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  • Fix potential privilege escalation in virtiofsd tool (CVE-2021-20263, bsc#1183373)
  • Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)
  • Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  • Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)
  • QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290)
  • For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)
Record
SUSE-SU-2021:1942-1
Updated
2026-11-02
OSVSUSE-SU-2021:1947-1No score

Security update for qemu

This update for qemu fixes the following issues:

  • Fix OOB access during mmio operations (CVE-2020-13754, bsc#1172382)
  • Fix out-of-bounds read information disclosure in icmp6_send_echoreply (CVE-2020-10756, bsc#1172380)
  • For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846, CVE-2021-3419, bsc#1182975)
Record
SUSE-SU-2021:1947-1
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
xen
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 2 CVEs
before 4.4.4_48-61.64.1
4.4.4_48-61.64.1
qemu
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 11 CVEs
before 2.6.2-41.65.1
2.6.2-41.65.1
qemu
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 11 CVEs
before 3.1.1.1-51.1
3.1.1.1-51.1
qemu
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 11 CVEs
before 3.1.1.1-51.1
3.1.1.1-51.1
qemu
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 11 CVEs
before 4.2.1-11.19.2
4.2.1-11.19.2
qemu
SUSE:Linux Enterprise Module for Server Applications 15 SP2
From an advisory covering 11 CVEs
before 4.2.1-11.19.2
4.2.1-11.19.2
qemu
SUSE:Linux Enterprise Micro 5.0
From an advisory covering 11 CVEs
before 4.2.1-11.19.2
4.2.1-11.19.2
qemu
SUSE:HPE Helion OpenStack 8
From an advisory covering 11 CVEs
before 2.9.1-6.50.1
2.9.1-6.50.1
qemu
SUSE:OpenStack Cloud 8
From an advisory covering 11 CVEs
before 2.9.1-6.50.1
2.9.1-6.50.1
qemu
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 11 CVEs
before 2.9.1-6.50.1
2.9.1-6.50.1
Show 27 moreShow less
Affected packages
PackageAffectedFixed
qemu
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 11 CVEs
before 2.9.1-6.50.1
2.9.1-6.50.1
qemu
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 11 CVEs
before 2.9.1-6.50.1
2.9.1-6.50.1
qemu
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 11 CVEs
before 2.9.1-6.50.1
2.9.1-6.50.1
qemu
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 11 CVEs
before 2.11.2-9.46.1
2.11.2-9.46.1
qemu
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 11 CVEs
before 2.11.2-9.46.1
2.11.2-9.46.1
qemu
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 11 CVEs
before 2.11.2-9.46.1
2.11.2-9.46.1
qemu
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 11 CVEs
before 2.11.2-9.46.1
2.11.2-9.46.1
qemu
SUSE:Linux Enterprise Module for Server Applications 15 SP2
From an advisory covering 10 CVEs
before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 10 CVEs
before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 10 CVEs
before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 10 CVEs
before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 10 CVEs
before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 10 CVEs
before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Manager Proxy 4.0
From an advisory covering 10 CVEs
before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Manager Retail Branch Server 4.0
From an advisory covering 10 CVEs
before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Manager Server 4.0
From an advisory covering 10 CVEs
before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Enterprise Storage 6
From an advisory covering 10 CVEs
before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 14 CVEs
before 5.2.0-17.1
5.2.0-17.1
qemu
SUSE:Linux Enterprise Module for Server Applications 15 SP3
From an advisory covering 14 CVEs
before 5.2.0-17.1
5.2.0-17.1
qemu
SUSE:OpenStack Cloud 9
From an advisory covering 11 CVEs
before 2.11.2-5.32.1
2.11.2-5.32.1
qemu
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 11 CVEs
before 2.11.2-5.32.1
2.11.2-5.32.1
qemu
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 11 CVEs
before 2.11.2-5.32.1
2.11.2-5.32.1
qemu
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 11 CVEs
before 2.11.2-5.32.1
2.11.2-5.32.1
qemu
openSUSE:Leap 15.2
From an advisory covering 14 CVEs
before 4.2.1-lp152.9.16.2
4.2.1-lp152.9.16.2
qemu-linux-user
openSUSE:Leap 15.2
From an advisory covering 14 CVEs
before 4.2.1-lp152.9.16.1
4.2.1-lp152.9.16.1
qemu-testsuite
openSUSE:Leap 15.2
From an advisory covering 14 CVEs
before 4.2.1-lp152.9.16.7
4.2.1-lp152.9.16.7
qemu
openSUSE:Leap 15.3
From an advisory covering 14 CVEs
before 5.2.0-17.1
5.2.0-17.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-3419 has been rejected by its source and should not be treated as a live vulnerability, published March 3, 2021.

References

Show 60 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open