Every CVE Search/ Get API key

CVE-2021-3607

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in...

6.0 MediumFix available

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.30%Down 0.6 points since Feb 25, 2022
90%50%10%1%

What each source reports

NVD Score used 6.0

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Record
CVE-2021-3607
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-190
Updated
2026-11-02
CVE List No score

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Record
CVE-2021-3607
Weakness
CWE-190
Updated
2026-11-02
EUVDEUVD-2021-26911 No score

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Record
EUVD-2021-26911
Updated
2026-11-03
GitHub AdvisoriesGHSA-3h3j-q234-gp6p 6.0

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in...

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Record
GHSA-3h3j-q234-gp6p
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Weakness
CWE-190
Updated
2026-11-02
OSVBELL-CVE-2021-3607 6.0

CVE-2021-3607 does not affect BellSoft software

Record
BELL-CVE-2021-3607
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSV 6.0

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Record
CVE-2021-3607
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
Show 13 moreShow less
OSVDEBIAN-CVE-2021-3607 6.0

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Record
DEBIAN-CVE-2021-3607
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2022-1617 6.5

qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.

Security Fix(es):

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.(CVE-2021-3607)

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest and may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. The highest threat from this vulnerability is to system availability.(CVE-2021-3608)

Record
OESA-2022-1617
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-3607 6.0

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Record
UBUNTU-CVE-2021-3607
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2021:1202-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • CVE-2021-3527: usb: unbounded stack allocation in usbredir (bsc#1186012)
  • CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)
  • CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364)
  • CVE-2021-3593: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365)
  • CVE-2021-3594: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367)
  • CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366)
  • CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)
  • CVE-2021-3608: Fix the ring init error flow (bsc#1187538)
  • CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)
  • CVE-2021-3682: usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145)
  • CVE-2020-35503: NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432)
  • CVE-2020-35504,CVE-2020-35505,CVE-2020-35506: NULL pointer dereference in ESP (bsc#1180433 bsc#1180434 bsc#1180435)
  • CVE-2021-20255: eepro100: stack overflow via infinite recursion (bsc#1182651)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2021:1202-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:2442-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)
  • CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)
  • CVE-2021-3608: Fix the ring init error flow (bsc#1187538)
  • CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)
Record
openSUSE-SU-2021:2442-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:2474-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366)
  • CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364)
  • CVE-2021-3594: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367)
  • CVE-2021-3593: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365)
  • CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)
  • CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)
  • CVE-2021-3608: Fix the ring init error flow (bsc#1187538)
  • CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)
Record
openSUSE-SU-2021:2474-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:2591-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366)
  • CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364)
  • CVE-2021-3594: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367)
  • CVE-2021-3593: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365)
  • CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)
  • CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)
  • CVE-2021-3608: Fix the ring init error flow (bsc#1187538)
  • CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)
  • CVE-2020-25085: Fix out-of-bounds access issue while doing multi block SDMA (bsc#1176681)

Other issues fixed:

  • QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  • Fix qemu hang while cancelling migrating hugepage vm (bsc#1185591)
Record
openSUSE-SU-2021:2591-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11287-1 No score

qemu-6.1.0-32.1 on GA media

These are all security issues fixed in the qemu-6.1.0-32.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11287-1
Updated
2026-11-02
OSVSUSE-SU-2021:2442-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)
  • CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)
  • CVE-2021-3608: Fix the ring init error flow (bsc#1187538)
  • CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)
Record
SUSE-SU-2021:2442-1
Updated
2026-11-02
OSVSUSE-SU-2021:2448-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security fixes:

  • CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366)
  • CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364)
  • CVE-2021-3594: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367)
  • CVE-2021-3593: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365)
  • CVE-2021-3582: Fixed possible mremap overflow in the pvrdma (bsc#1187499)
  • CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)
  • CVE-2021-3608: Fixed the ring init error flow (bsc#1187538)
  • CVE-2021-3611: Fixed intel-hda segmentation fault due to stack overflow (bsc#1187529)

Other fixes:

  • Fix qemu hang while cancelling migrating hugepage vm (bsc#1185591)
Record
SUSE-SU-2021:2448-1
Updated
2026-11-02
OSVSUSE-SU-2021:2474-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366)
  • CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364)
  • CVE-2021-3594: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367)
  • CVE-2021-3593: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365)
  • CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)
  • CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)
  • CVE-2021-3608: Fix the ring init error flow (bsc#1187538)
  • CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)
Record
SUSE-SU-2021:2474-1
Updated
2026-11-02
OSVSUSE-SU-2021:2591-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366)
  • CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364)
  • CVE-2021-3594: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367)
  • CVE-2021-3593: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365)
  • CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)
  • CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)
  • CVE-2021-3608: Fix the ring init error flow (bsc#1187538)
  • CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)
  • CVE-2020-25085: Fix out-of-bounds access issue while doing multi block SDMA (bsc#1176681)

Other issues fixed:

  • QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  • Fix qemu hang while cancelling migrating hugepage vm (bsc#1185591)
Record
SUSE-SU-2021:2591-1
Updated
2026-11-02
OSVUSN-5010-1 No score

qemu vulnerabilities

Lei Sun discovered that QEMU incorrectly handled certain MMIO operations. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2020-15469)

Wenxiang Qian discovered that QEMU incorrectly handled certain ATAPI commands. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 21.04. (CVE-2020-29443)

Cheolwoo Myung discovered that QEMU incorrectly handled SCSI device emulation. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2020-35504, CVE-2020-35505, CVE-2021-3392)

Alex Xu discovered that QEMU incorrectly handled the virtio-fs shared file system daemon. An attacker inside the guest could possibly use this issue to read and write to host devices. This issue only affected Ubuntu 20.10. (CVE-2020-35517)

It was discovered that QEMU incorrectly handled ARM Generic Interrupt Controller emulation. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 20.10. (CVE-2021-20221)

Alexander Bulekov, Cheolwoo Myung, Sergej Schumilo, Cornelius Aschermann, and Simon Werner discovered that QEMU incorrectly handled e1000 device emulation. An attacker inside the guest could possibly use this issue to cause QEMU to hang, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 20.10. (CVE-2021-20257)

It was discovered that QEMU incorrectly handled SDHCI controller emulation. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. In the default installation, when QEMU is used in combination with libvirt, attackers would be isolated by the libvirt AppArmor profile. (CVE-2021-3409)

It was discovered that QEMU incorrectly handled certain NIC emulation devices. An attacker inside the guest could possibly use this issue to cause QEMU to hang or crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 20.10. (CVE-2021-3416)

Remy Noel discovered that QEMU incorrectly handled the USB redirector device. An attacker inside the guest could possibly use this issue to cause QEMU to consume resources, resulting in a denial of service. (CVE-2021-3527)

It was discovered that QEMU incorrectly handled the virtio vhost-user GPU device. An attacker inside the guest could possibly use this issue to cause QEMU to consume resources, leading to a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. (CVE-2021-3544)

It was discovered that QEMU incorrectly handled the virtio vhost-user GPU device. An attacker inside the guest could possibly use this issue to obtain sensitive host information. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. (CVE-2021-3545)

It was discovered that QEMU incorrectly handled the virtio vhost-user GPU device. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. In the default installation, when QEMU is used in combination with libvirt, attackers would be isolated by the libvirt AppArmor profile. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. (CVE-2021-3546)

It was discovered that QEMU incorrectly handled the PVRDMA device. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. In the default installation, when QEMU is used in combination with libvirt, attackers would be isolated by the libvirt AppArmor profile. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. (CVE-2021-3582,…

Record
USN-5010-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qemu
Debian:12
 before 1:5.2+dfsg-11
1:5.2+dfsg-11
qemu
Debian:13
 before 1:5.2+dfsg-11
1:5.2+dfsg-11
qemu
Debian:14
 before 1:5.2+dfsg-11
1:5.2+dfsg-11
qemu
Debian:10
From an advisory covering 35 CVEs
 before 1:3.1+dfsg-8+deb10u9, plus listed versions
1:3.1+dfsg-81:3.1+dfsg-8+deb10u21:3.1+dfsg-8+deb10u31:3.1+dfsg-8+deb10u41:3.1+dfsg-8+deb10u5
Show 4 moreShow less
1:3.1+dfsg-8+deb10u61:3.1+dfsg-8+deb10u71:3.1+dfsg-8+deb10u81:3.1+dfsg-8~deb10u1
1:3.1+dfsg-8+deb10u9
qemu
openEuler:20.03-LTS-SP1
From an advisory covering 2 CVEs
 before 4.1.0-62.oe1
4.1.0-62.oe1
qemu
openEuler:20.03-LTS-SP2
From an advisory covering 2 CVEs
 before 4.1.0-66.oe1
4.1.0-66.oe1
qemu
openEuler:20.03-LTS-SP3
From an advisory covering 2 CVEs
 before 4.1.0-66.oe1
4.1.0-66.oe1
qemu
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 4 CVEs
 before 5.2.0-23.1
5.2.0-23.1
qemu
SUSE:Linux Enterprise Module for Server Applications 15 SP3
From an advisory covering 4 CVEs
 before 5.2.0-23.1
5.2.0-23.1
qemu
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 8 CVEs
 before 3.1.1.1-54.1
3.1.1.1-54.1
Show 24 moreShow less
Affected packages
PackageAffectedFixed
qemu
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 8 CVEs
 before 3.1.1.1-54.1
3.1.1.1-54.1
qemu
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 8 CVEs
 before 4.2.1-11.25.2
4.2.1-11.25.2
qemu
SUSE:Linux Enterprise Module for Server Applications 15 SP2
From an advisory covering 8 CVEs
 before 4.2.1-11.25.2
4.2.1-11.25.2
qemu
SUSE:Linux Enterprise Micro 5.0
From an advisory covering 8 CVEs
 before 4.2.1-11.25.2
4.2.1-11.25.2
qemu
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 9 CVEs
 before 3.1.1.1-9.30.2
3.1.1.1-9.30.2
qemu
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 9 CVEs
 before 3.1.1.1-9.30.2
3.1.1.1-9.30.2
qemu
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 9 CVEs
 before 3.1.1.1-9.30.2
3.1.1.1-9.30.2
qemu
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 9 CVEs
 before 3.1.1.1-9.30.2
3.1.1.1-9.30.2
qemu
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 9 CVEs
 before 3.1.1.1-9.30.2
3.1.1.1-9.30.2
qemu
SUSE:Manager Proxy 4.0
From an advisory covering 9 CVEs
 before 3.1.1.1-9.30.2
3.1.1.1-9.30.2
qemu
SUSE:Manager Retail Branch Server 4.0
From an advisory covering 9 CVEs
 before 3.1.1.1-9.30.2
3.1.1.1-9.30.2
qemu
SUSE:Manager Server 4.0
From an advisory covering 9 CVEs
 before 3.1.1.1-9.30.2
3.1.1.1-9.30.2
qemu
SUSE:Enterprise Storage 6
From an advisory covering 9 CVEs
 before 3.1.1.1-9.30.2
3.1.1.1-9.30.2
qemu
Ubuntu:20.04:LTS
 before 1:4.2-3ubuntu6.17, plus listed versions
1:4.0+dfsg-0ubuntu91:4.0+dfsg-0ubuntu101:4.2-1ubuntu11:4.2-1ubuntu21:4.2-3ubuntu1
Show 20 moreShow less
1:4.2-3ubuntu21:4.2-3ubuntu31:4.2-3ubuntu41:4.2-3ubuntu51:4.2-3ubuntu61:4.2-3ubuntu6.11:4.2-3ubuntu6.21:4.2-3ubuntu6.31:4.2-3ubuntu6.41:4.2-3ubuntu6.51:4.2-3ubuntu6.61:4.2-3ubuntu6.71:4.2-3ubuntu6.81:4.2-3ubuntu6.91:4.2-3ubuntu6.101:4.2-3ubuntu6.111:4.2-3ubuntu6.121:4.2-3ubuntu6.141:4.2-3ubuntu6.151:4.2-3ubuntu6.16
1:4.2-3ubuntu6.17
qemu
Ubuntu:22.04:LTS
 before 1:6.0+dfsg-2expubuntu1
1:6.0+dfsg-2expubuntu1
qemu
Ubuntu:18.04:LTS
From an advisory covering 20 CVEs
 before 1:2.11+dfsg-1ubuntu7.37, plus listed versions
1:2.10+dfsg-0ubuntu31:2.10+dfsg-0ubuntu41:2.10+dfsg-0ubuntu51:2.11+dfsg-1ubuntu11:2.11+dfsg-1ubuntu2
Show 36 moreShow less
1:2.11+dfsg-1ubuntu41:2.11+dfsg-1ubuntu51:2.11+dfsg-1ubuntu61:2.11+dfsg-1ubuntu71:2.11+dfsg-1ubuntu7.11:2.11+dfsg-1ubuntu7.21:2.11+dfsg-1ubuntu7.31:2.11+dfsg-1ubuntu7.41:2.11+dfsg-1ubuntu7.51:2.11+dfsg-1ubuntu7.61:2.11+dfsg-1ubuntu7.71:2.11+dfsg-1ubuntu7.81:2.11+dfsg-1ubuntu7.91:2.11+dfsg-1ubuntu7.101:2.11+dfsg-1ubuntu7.121:2.11+dfsg-1ubuntu7.131:2.11+dfsg-1ubuntu7.141:2.11+dfsg-1ubuntu7.151:2.11+dfsg-1ubuntu7.171:2.11+dfsg-1ubuntu7.181:2.11+dfsg-1ubuntu7.191:2.11+dfsg-1ubuntu7.201:2.11+dfsg-1ubuntu7.211:2.11+dfsg-1ubuntu7.221:2.11+dfsg-1ubuntu7.231:2.11+dfsg-1ubuntu7.251:2.11+dfsg-1ubuntu7.261:2.11+dfsg-1ubuntu7.271:2.11+dfsg-1ubuntu7.281:2.11+dfsg-1ubuntu7.291:2.11+dfsg-1ubuntu7.311:2.11+dfsg-1ubuntu7.321:2.11+dfsg-1ubuntu7.331:2.11+dfsg-1ubuntu7.341:2.11+dfsg-1ubuntu7.351:2.11+dfsg-1ubuntu7.36
1:2.11+dfsg-1ubuntu7.37
qemu
Ubuntu:20.04:LTS
From an advisory covering 20 CVEs
 before 1:4.2-3ubuntu6.17, plus listed versions
1:4.0+dfsg-0ubuntu91:4.0+dfsg-0ubuntu101:4.2-1ubuntu11:4.2-1ubuntu21:4.2-3ubuntu1
Show 20 moreShow less
1:4.2-3ubuntu21:4.2-3ubuntu31:4.2-3ubuntu41:4.2-3ubuntu51:4.2-3ubuntu61:4.2-3ubuntu6.11:4.2-3ubuntu6.21:4.2-3ubuntu6.31:4.2-3ubuntu6.41:4.2-3ubuntu6.51:4.2-3ubuntu6.61:4.2-3ubuntu6.71:4.2-3ubuntu6.81:4.2-3ubuntu6.91:4.2-3ubuntu6.101:4.2-3ubuntu6.111:4.2-3ubuntu6.121:4.2-3ubuntu6.141:4.2-3ubuntu6.151:4.2-3ubuntu6.16
1:4.2-3ubuntu6.17
qemu
openSUSE:Leap 15.2
From an advisory covering 15 CVEs
 before 4.2.1-lp152.9.20.1
4.2.1-lp152.9.20.1
qemu-linux-user
openSUSE:Leap 15.2
From an advisory covering 15 CVEs
 before 4.2.1-lp152.9.20.1
4.2.1-lp152.9.20.1
qemu-testsuite
openSUSE:Leap 15.2
From an advisory covering 15 CVEs
 before 4.2.1-lp152.9.20.1
4.2.1-lp152.9.20.1
qemu
openSUSE:Leap 15.3
From an advisory covering 4 CVEs
 before 5.2.0-23.1
5.2.0-23.1
qemu
openSUSE:Leap 15.3
From an advisory covering 8 CVEs
 before 4.2.1-11.25.2
4.2.1-11.25.2
qemu
openSUSE:Leap 15.3
From an advisory covering 9 CVEs
 before 3.1.1.1-9.30.2
3.1.1.1-9.30.2
qemu
openSUSE:Tumbleweed
From an advisory covering 135 CVEs
 before 6.1.0-32.1
6.1.0-32.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-3607 is a medium vulnerability (CVSS 6.0) in Qemu, published June 18, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 22nd percentile. Fixed in qemu 1:5.2+dfsg-11.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 5 references and the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open