{"id":"CVE-2021-3409","aliases":["ALPINE-CVE-2021-3409","BELL-CVE-2021-3409","DEBIAN-CVE-2021-3409","DLA-2623-1","DLA-3362-1","EUVD-2021-26737","GHSA-mx4g-vhmg-3rf6","OESA-2021-1191","SUSE-SU-2021:1942-1","SUSE-SU-2022:3594-1","SUSE-SU-2022:3768-1","SUSE-SU-2023:0761-1","UBUNTU-CVE-2021-3409","USN-5010-1","openSUSE-SU-2021:1942-1"],"status":"published","title":"The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU...","description":"The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this.","severity":{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00489,"percentile":0.42456,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2021-03-23T20:20:58Z","modified":"2026-11-03T06:32:58Z","fixes":[{"ecosystem":"Alpine:v3.16","package":"qemu","fixed_in":["6.0.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"qemu","fixed_in":["6.0.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"qemu","fixed_in":["6.0.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"qemu","fixed_in":["6.0.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"qemu","fixed_in":["6.0.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"qemu","fixed_in":["6.0.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"qemu","fixed_in":["6.0.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qemu","fixed_in":["6.0.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"qemu","fixed_in":["6.0.0-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"qemu","fixed_in":["1:5.2+dfsg-10"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qemu","fixed_in":["1:5.2+dfsg-10"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qemu","fixed_in":["1:5.2+dfsg-10"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"qemu","fixed_in":["2.0.0+dfsg-2ubuntu1.47+esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"qemu","fixed_in":["1:2.5+dfsg-5ubuntu10.51+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"qemu","fixed_in":["1:2.11+dfsg-1ubuntu7.37"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"qemu","fixed_in":["1:4.2-3ubuntu6.17"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.2+dfsg-10"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.2+dfsg-10"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.2+dfsg-10"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.8+dfsg-6+deb9u14"}]}],"versions":["1:2.8+dfsg-6","1:2.8+dfsg-6+deb9u1","1:2.8+dfsg-6+deb9u10","1:2.8+dfsg-6+deb9u11","1:2.8+dfsg-6+deb9u12","1:2.8+dfsg-6+deb9u13","1:2.8+dfsg-6+deb9u2","1:2.8+dfsg-6+deb9u3","1:2.8+dfsg-6+deb9u4","1:2.8+dfsg-6+deb9u5","1:2.8+dfsg-6+deb9u6","1:2.8+dfsg-6+deb9u7","1:2.8+dfsg-6+deb9u8","1:2.8+dfsg-6+deb9u9"],"bundled":7},{"source":"osv","ecosystem":"Debian:10","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1+dfsg-8+deb10u10"}]}],"versions":["1:3.1+dfsg-8","1:3.1+dfsg-8+deb10u2","1:3.1+dfsg-8+deb10u3","1:3.1+dfsg-8+deb10u4","1:3.1+dfsg-8+deb10u5","1:3.1+dfsg-8+deb10u6","1:3.1+dfsg-8+deb10u7","1:3.1+dfsg-8+deb10u8","1:3.1+dfsg-8+deb10u9","1:3.1+dfsg-8~deb10u1"],"bundled":10},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-44.oe1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-150100.80.43.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-150100.80.43.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-150100.80.43.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-150100.80.43.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-150100.80.43.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-150100.80.43.2"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-150100.80.43.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-66.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-66.1"}]}],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0+dfsg-2ubuntu1.47+esm6"}]}],"versions":["1.5.0+dfsg-3ubuntu5","1.5.0+dfsg-3ubuntu6","1.6.0+dfsg-2ubuntu1","1.6.0+dfsg-2ubuntu2","1.6.0+dfsg-2ubuntu3","1.6.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu1","1.7.0+dfsg-2ubuntu2","1.7.0+dfsg-2ubuntu3","1.7.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu5","1.7.0+dfsg-2ubuntu7","1.7.0+dfsg-2ubuntu8","1.7.0+dfsg-2ubuntu9","1.7.0+dfsg-3ubuntu1~ppa1","1.7.0+dfsg-3ubuntu1","1.7.0+dfsg-3ubuntu2","1.7.0+dfsg-3ubuntu3","1.7.0+dfsg-3ubuntu4","1.7.0+dfsg-3ubuntu5","1.7.0+dfsg-3ubuntu6","1.7.0+dfsg-3ubuntu7","2.0.0~rc1+dfsg-0ubuntu1","2.0.0~rc1+dfsg-0ubuntu2","2.0.0~rc1+dfsg-0ubuntu3","2.0.0~rc1+dfsg-0ubuntu3.1","2.0.0+dfsg-2ubuntu1","2.0.0+dfsg-2ubuntu1.1","2.0.0+dfsg-2ubuntu1.2","2.0.0+dfsg-2ubuntu1.3","2.0.0+dfsg-2ubuntu1.5","2.0.0+dfsg-2ubuntu1.6","2.0.0+dfsg-2ubuntu1.7","2.0.0+dfsg-2ubuntu1.8","2.0.0+dfsg-2ubuntu1.9","2.0.0+dfsg-2ubuntu1.10","2.0.0+dfsg-2ubuntu1.11","2.0.0+dfsg-2ubuntu1.13","2.0.0+dfsg-2ubuntu1.14","2.0.0+dfsg-2ubuntu1.15","2.0.0+dfsg-2ubuntu1.16","2.0.0+dfsg-2ubuntu1.17","2.0.0+dfsg-2ubuntu1.18","2.0.0+dfsg-2ubuntu1.19","2.0.0+dfsg-2ubuntu1.20","2.0.0+dfsg-2ubuntu1.21","2.0.0+dfsg-2ubuntu1.22","2.0.0+dfsg-2ubuntu1.24","2.0.0+dfsg-2ubuntu1.25","2.0.0+dfsg-2ubuntu1.26","2.0.0+dfsg-2ubuntu1.27","2.0.0+dfsg-2ubuntu1.28","2.0.0+dfsg-2ubuntu1.29","2.0.0+dfsg-2ubuntu1.30","2.0.0+dfsg-2ubuntu1.31","2.0.0+dfsg-2ubuntu1.32","2.0.0+dfsg-2ubuntu1.33","2.0.0+dfsg-2ubuntu1.34","2.0.0+dfsg-2ubuntu1.35","2.0.0+dfsg-2ubuntu1.36","2.0.0+dfsg-2ubuntu1.38","2.0.0+dfsg-2ubuntu1.39","2.0.0+dfsg-2ubuntu1.40","2.0.0+dfsg-2ubuntu1.41","2.0.0+dfsg-2ubuntu1.42","2.0.0+dfsg-2ubuntu1.43","2.0.0+dfsg-2ubuntu1.44","2.0.0+dfsg-2ubuntu1.45","2.0.0+dfsg-2ubuntu1.46","2.0.0+dfsg-2ubuntu1.47","2.0.0+dfsg-2ubuntu1.47+esm1","2.0.0+dfsg-2ubuntu1.47+esm2","2.0.0+dfsg-2ubuntu1.47+esm3","2.0.0+dfsg-2ubuntu1.47+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.5+dfsg-5ubuntu10.51+esm4"}]}],"versions":["1:2.3+dfsg-5ubuntu9","1:2.3+dfsg-5ubuntu10","1:2.4+dfsg-4ubuntu1","1:2.4+dfsg-4ubuntu2","1:2.4+dfsg-4ubuntu3","1:2.4+dfsg-5ubuntu3","1:2.5+dfsg-1ubuntu2","1:2.5+dfsg-1ubuntu3","1:2.5+dfsg-1ubuntu4","1:2.5+dfsg-1ubuntu5","1:2.5+dfsg-5ubuntu1","1:2.5+dfsg-5ubuntu2","1:2.5+dfsg-5ubuntu4","1:2.5+dfsg-5ubuntu6","1:2.5+dfsg-5ubuntu7","1:2.5+dfsg-5ubuntu10","1:2.5+dfsg-5ubuntu10.1","1:2.5+dfsg-5ubuntu10.2","1:2.5+dfsg-5ubuntu10.3","1:2.5+dfsg-5ubuntu10.4","1:2.5+dfsg-5ubuntu10.5","1:2.5+dfsg-5ubuntu10.6","1:2.5+dfsg-5ubuntu10.7","1:2.5+dfsg-5ubuntu10.8","1:2.5+dfsg-5ubuntu10.9","1:2.5+dfsg-5ubuntu10.10","1:2.5+dfsg-5ubuntu10.11","1:2.5+dfsg-5ubuntu10.13","1:2.5+dfsg-5ubuntu10.14","1:2.5+dfsg-5ubuntu10.15","1:2.5+dfsg-5ubuntu10.16","1:2.5+dfsg-5ubuntu10.20","1:2.5+dfsg-5ubuntu10.21","1:2.5+dfsg-5ubuntu10.22","1:2.5+dfsg-5ubuntu10.24","1:2.5+dfsg-5ubuntu10.25","1:2.5+dfsg-5ubuntu10.26","1:2.5+dfsg-5ubuntu10.28","1:2.5+dfsg-5ubuntu10.29","1:2.5+dfsg-5ubuntu10.30","1:2.5+dfsg-5ubuntu10.31","1:2.5+dfsg-5ubuntu10.32","1:2.5+dfsg-5ubuntu10.33","1:2.5+dfsg-5ubuntu10.34","1:2.5+dfsg-5ubuntu10.35","1:2.5+dfsg-5ubuntu10.36","1:2.5+dfsg-5ubuntu10.37","1:2.5+dfsg-5ubuntu10.38","1:2.5+dfsg-5ubuntu10.39","1:2.5+dfsg-5ubuntu10.40","1:2.5+dfsg-5ubuntu10.41","1:2.5+dfsg-5ubuntu10.42","1:2.5+dfsg-5ubuntu10.43","1:2.5+dfsg-5ubuntu10.44","1:2.5+dfsg-5ubuntu10.45","1:2.5+dfsg-5ubuntu10.46","1:2.5+dfsg-5ubuntu10.47","1:2.5+dfsg-5ubuntu10.48","1:2.5+dfsg-5ubuntu10.49","1:2.5+dfsg-5ubuntu10.51","1:2.5+dfsg-5ubuntu10.51+esm1","1:2.5+dfsg-5ubuntu10.51+esm2","1:2.5+dfsg-5ubuntu10.51+esm3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.11+dfsg-1ubuntu7.37"}]}],"versions":["1:2.10+dfsg-0ubuntu3","1:2.10+dfsg-0ubuntu4","1:2.10+dfsg-0ubuntu5","1:2.11+dfsg-1ubuntu1","1:2.11+dfsg-1ubuntu2","1:2.11+dfsg-1ubuntu4","1:2.11+dfsg-1ubuntu5","1:2.11+dfsg-1ubuntu6","1:2.11+dfsg-1ubuntu7","1:2.11+dfsg-1ubuntu7.1","1:2.11+dfsg-1ubuntu7.2","1:2.11+dfsg-1ubuntu7.3","1:2.11+dfsg-1ubuntu7.4","1:2.11+dfsg-1ubuntu7.5","1:2.11+dfsg-1ubuntu7.6","1:2.11+dfsg-1ubuntu7.7","1:2.11+dfsg-1ubuntu7.8","1:2.11+dfsg-1ubuntu7.9","1:2.11+dfsg-1ubuntu7.10","1:2.11+dfsg-1ubuntu7.12","1:2.11+dfsg-1ubuntu7.13","1:2.11+dfsg-1ubuntu7.14","1:2.11+dfsg-1ubuntu7.15","1:2.11+dfsg-1ubuntu7.17","1:2.11+dfsg-1ubuntu7.18","1:2.11+dfsg-1ubuntu7.19","1:2.11+dfsg-1ubuntu7.20","1:2.11+dfsg-1ubuntu7.21","1:2.11+dfsg-1ubuntu7.22","1:2.11+dfsg-1ubuntu7.23","1:2.11+dfsg-1ubuntu7.25","1:2.11+dfsg-1ubuntu7.26","1:2.11+dfsg-1ubuntu7.27","1:2.11+dfsg-1ubuntu7.28","1:2.11+dfsg-1ubuntu7.29","1:2.11+dfsg-1ubuntu7.31","1:2.11+dfsg-1ubuntu7.32","1:2.11+dfsg-1ubuntu7.33","1:2.11+dfsg-1ubuntu7.34","1:2.11+dfsg-1ubuntu7.35","1:2.11+dfsg-1ubuntu7.36"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2-3ubuntu6.17"}]}],"versions":["1:4.0+dfsg-0ubuntu9","1:4.0+dfsg-0ubuntu10","1:4.2-1ubuntu1","1:4.2-1ubuntu2","1:4.2-3ubuntu1","1:4.2-3ubuntu2","1:4.2-3ubuntu3","1:4.2-3ubuntu4","1:4.2-3ubuntu5","1:4.2-3ubuntu6","1:4.2-3ubuntu6.1","1:4.2-3ubuntu6.2","1:4.2-3ubuntu6.3","1:4.2-3ubuntu6.4","1:4.2-3ubuntu6.5","1:4.2-3ubuntu6.6","1:4.2-3ubuntu6.7","1:4.2-3ubuntu6.8","1:4.2-3ubuntu6.9","1:4.2-3ubuntu6.10","1:4.2-3ubuntu6.11","1:4.2-3ubuntu6.12","1:4.2-3ubuntu6.14","1:4.2-3ubuntu6.15","1:4.2-3ubuntu6.16"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.11+dfsg-1ubuntu7.37"}]}],"versions":["1:2.10+dfsg-0ubuntu3","1:2.10+dfsg-0ubuntu4","1:2.10+dfsg-0ubuntu5","1:2.11+dfsg-1ubuntu1","1:2.11+dfsg-1ubuntu2","1:2.11+dfsg-1ubuntu4","1:2.11+dfsg-1ubuntu5","1:2.11+dfsg-1ubuntu6","1:2.11+dfsg-1ubuntu7","1:2.11+dfsg-1ubuntu7.1","1:2.11+dfsg-1ubuntu7.2","1:2.11+dfsg-1ubuntu7.3","1:2.11+dfsg-1ubuntu7.4","1:2.11+dfsg-1ubuntu7.5","1:2.11+dfsg-1ubuntu7.6","1:2.11+dfsg-1ubuntu7.7","1:2.11+dfsg-1ubuntu7.8","1:2.11+dfsg-1ubuntu7.9","1:2.11+dfsg-1ubuntu7.10","1:2.11+dfsg-1ubuntu7.12","1:2.11+dfsg-1ubuntu7.13","1:2.11+dfsg-1ubuntu7.14","1:2.11+dfsg-1ubuntu7.15","1:2.11+dfsg-1ubuntu7.17","1:2.11+dfsg-1ubuntu7.18","1:2.11+dfsg-1ubuntu7.19","1:2.11+dfsg-1ubuntu7.20","1:2.11+dfsg-1ubuntu7.21","1:2.11+dfsg-1ubuntu7.22","1:2.11+dfsg-1ubuntu7.23","1:2.11+dfsg-1ubuntu7.25","1:2.11+dfsg-1ubuntu7.26","1:2.11+dfsg-1ubuntu7.27","1:2.11+dfsg-1ubuntu7.28","1:2.11+dfsg-1ubuntu7.29","1:2.11+dfsg-1ubuntu7.31","1:2.11+dfsg-1ubuntu7.32","1:2.11+dfsg-1ubuntu7.33","1:2.11+dfsg-1ubuntu7.34","1:2.11+dfsg-1ubuntu7.35","1:2.11+dfsg-1ubuntu7.36"],"bundled":20},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2-3ubuntu6.17"}]}],"versions":["1:4.0+dfsg-0ubuntu9","1:4.0+dfsg-0ubuntu10","1:4.2-1ubuntu1","1:4.2-1ubuntu2","1:4.2-3ubuntu1","1:4.2-3ubuntu2","1:4.2-3ubuntu3","1:4.2-3ubuntu4","1:4.2-3ubuntu5","1:4.2-3ubuntu6","1:4.2-3ubuntu6.1","1:4.2-3ubuntu6.2","1:4.2-3ubuntu6.3","1:4.2-3ubuntu6.4","1:4.2-3ubuntu6.5","1:4.2-3ubuntu6.6","1:4.2-3ubuntu6.7","1:4.2-3ubuntu6.8","1:4.2-3ubuntu6.9","1:4.2-3ubuntu6.10","1:4.2-3ubuntu6.11","1:4.2-3ubuntu6.12","1:4.2-3ubuntu6.14","1:4.2-3ubuntu6.15","1:4.2-3ubuntu6.16"],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-17.1"}]}],"bundled":14}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"qemu","product":"qemu"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1928146","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://www.openwall.com/lists/oss-security/2021/03/09/1","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210507-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202208-27","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3409","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-mx4g-vhmg-3rf6"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-3409","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-3409","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3409","tags":["advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3416","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3392","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25085","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211942-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1149813","tags":["report"]},{"url":"https://bugzilla.suse.com/1163019","tags":["report"]},{"url":"https://bugzilla.suse.com/1175144","tags":["report"]},{"url":"https://bugzilla.suse.com/1175534","tags":["report"]},{"url":"https://bugzilla.suse.com/1176681","tags":["report"]},{"url":"https://bugzilla.suse.com/1178683","tags":["report"]},{"url":"https://bugzilla.suse.com/1178935","tags":["report"]},{"url":"https://bugzilla.suse.com/1179477","tags":["report"]},{"url":"https://bugzilla.suse.com/1179484","tags":["report"]},{"url":"https://bugzilla.suse.com/1179686","tags":["report"]},{"url":"https://bugzilla.suse.com/1181103","tags":["report"]},{"url":"https://bugzilla.suse.com/1182282","tags":["report"]},{"url":"https://bugzilla.suse.com/1182425","tags":["report"]},{"url":"https://bugzilla.suse.com/1182968","tags":["report"]},{"url":"https://bugzilla.suse.com/1182975","tags":["report"]},{"url":"https://bugzilla.suse.com/1183373","tags":["report"]},{"url":"https://bugzilla.suse.com/1186290","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3419","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223594-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1192115","tags":["report"]},{"url":"https://bugzilla.suse.com/1198035","tags":["report"]},{"url":"https://bugzilla.suse.com/1198037","tags":["report"]},{"url":"https://bugzilla.suse.com/1198038","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-35414","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223768-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1185000","tags":["report"]},{"url":"https://bugzilla.suse.com/1192463","tags":["report"]},{"url":"https://bugzilla.suse.com/1201367","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3507","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230761-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1172033","tags":["report"]},{"url":"https://bugzilla.suse.com/1172382","tags":["report"]},{"url":"https://bugzilla.suse.com/1180207","tags":["report"]},{"url":"https://bugzilla.suse.com/1193880","tags":["report"]},{"url":"https://bugzilla.suse.com/1197653","tags":["report"]},{"url":"https://bugzilla.suse.com/1198712","tags":["report"]},{"url":"https://bugzilla.suse.com/1205808","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4144","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-3409","tags":["report"]},{"url":"https://lists.nongnu.org/archive/html/qemu-devel/2021-02/msg02910.html","tags":["report"]},{"url":"https://lists.nongnu.org/archive/html/qemu-devel/2021-02/msg03102.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5010-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3409","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8412-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-15469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-29443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-35504","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-35505","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-35517","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3392","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3416","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3527","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3544","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3545","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3592","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3593","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3594","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3595","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3608","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20257","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEKBDJBTGKO53MSKM3SRYVUQDWIJ2N5I/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-3409","description":"The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this.","status":"published","published":"2021-03-23T20:20:58Z","modified":"2024-08-03T16:53:17.527Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-26737","description":"The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this.","status":"published","published":"2021-03-23T20:20:58Z","modified":"2024-08-03T16:53:17Z","updated_at":"2026-11-03T03:25:13.052236Z"}],"ghsa":[{"id":"GHSA-mx4g-vhmg-3rf6","title":"The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU...","description":"The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this.","status":"published","published":"2022-05-24T17:45:09Z","modified":"2023-01-27T05:02:58Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:42:08.614878Z"}],"nvd":[{"id":"CVE-2021-3409","description":"The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this.","status":"published","published":"2021-03-23T21:15:14.697Z","modified":"2026-06-17T04:05:02.463Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:06:50.805771Z"}],"osv":[{"id":"ALPINE-CVE-2021-3409","description":"The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this.","status":"published","published":"2021-03-23T21:15:14.697Z","modified":"2026-11-03T06:32:58.491472015Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"BELL-CVE-2021-3409","title":"CVE-2021-3409 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:06.231029Z","modified":"2026-01-26T09:48:44.21532Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-3409","description":"The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this.","status":"published","published":"2021-03-23T21:15:14.697Z","modified":"2026-10-24T10:30:52.799360717Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:20.13324Z"},{"id":"DEBIAN-CVE-2021-3409","description":"The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this.","status":"published","published":"2021-03-23T21:15:14.697Z","modified":"2026-10-23T18:03:26.738032872Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"OESA-2021-1191","title":"qemu security update","description":"QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.\r\n\r\n\r\n\r\nSecurity Fix(es):\r\n\r\nA potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS scenario.(CVE-2021-3416)\r\n\r\nThe patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this.(CVE-2021-3409)\r\n\r\nA use-after-free flaw was found in the MegaRAID emulator of QEMU. This issue occurs while processing SCSI I/O requests in the case of an error mptsas_free_request() that does not dequeue the request object \u0026apos;req\u0026apos; from a pending requests queue. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. Versions between 2.10.0 and 5.2.0 are potentially affected.(CVE-2021-3392)\r\n\r\nQEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case.(CVE-2020-25085)","status":"published","published":"2021-05-24T11:04:25Z","modified":"2026-08-18T01:15:35.407660146Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2021-3409","description":"The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this.","status":"published","published":"2021-03-23T21:15:00Z","modified":"2026-06-09T21:29:20.682746908Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"DLA-2623-1","title":"qemu - security update","status":"published","published":"2021-04-10T00:00:00Z","modified":"2026-03-09T01:20:47.364097Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DLA-3362-1","title":"qemu - security update","status":"published","published":"2023-03-14T00:00:00Z","modified":"2026-03-09T01:23:24.053929Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"openSUSE-SU-2021:1942-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a module to what was accepted upstream (bsc#1181103)\n- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144, CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)\n- Fix potential privilege escalation in virtiofsd tool (CVE-2021-20263, bsc#1183373)\n- Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)\n- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)\n- Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)\n- QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290)\n- For the record, these issues are fixed in this package already.\n  Most are alternate references to previously mentioned issues:\n  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,\n  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,\n  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,\n  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)\n","status":"published","published":"2021-07-11T09:13:24Z","modified":"2025-05-07T18:10:46.174369Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"SUSE-SU-2021:1942-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a module to what was accepted upstream (bsc#1181103)\n- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144, CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)\n- Fix potential privilege escalation in virtiofsd tool (CVE-2021-20263, bsc#1183373)\n- Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)\n- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)\n- Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)\n- QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290)\n- For the record, these issues are fixed in this package already.\n  Most are alternate references to previously mentioned issues:\n  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,\n  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,\n  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,\n  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)\n","status":"published","published":"2021-06-10T08:50:33Z","modified":"2026-02-04T02:14:19.470204Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2022:3594-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- CVE-2021-3409: Fixed an incomplete fix for CVE-2020-17380 and CVE-2020-25085 in sdhi controller. (bsc#1182282)\n- CVE-2021-4206: Fixed an integer overflow in cursor_alloc which can lead to heap buffer overflow. (bsc#1198035)\n- CVE-2021-4207: Fixed a double fetch in qxl_cursor ehich can lead to heap buffer overflow. (bsc#1198037)\n- CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. (bsc#1198038)\n- CVE-2022-35414: Fixed an uninitialized read during address translation that leads to a crash. (bsc#1201367)\n","status":"published","published":"2022-10-17T06:40:58Z","modified":"2026-02-04T02:15:57.803404Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3768-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- CVE-2021-3409: Fixed an incomplete fix for CVE-2020-17380 and CVE-2020-25085 in sdhi controller. (bsc#1182282)\n- CVE-2021-4206: Fixed an integer overflow in cursor_alloc which can lead to heap buffer overflow. (bsc#1198035)\n- CVE-2021-4207: Fixed a double fetch in qxl_cursor ehich can lead to heap buffer overflow. (bsc#1198037)\n- CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. (bsc#1198038)\n- CVE-2022-35414: Fixed an uninitialized read during address translation that leads to a crash. (bsc#1201367)\n- CVE-2021-3507: Fixed a heap buffer overflow in DMA read data transfers. (bsc#1185000)\n- CVE-2020-17380: Fixed a heap buffer overflow in sdhci_sdma_transfer_multi_blocks. (bsc#1175144)\n","status":"published","published":"2022-10-26T10:13:09Z","modified":"2025-05-02T04:30:33.657236Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2023:0761-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- bsc#1172033 (CVE-2020-13253)\n\n- bsc#1180207 (CVE-2020-14394)\n\n- bsc#1172382 (CVE-2020-13754)\n\n- bsc#1198038 (CVE-2022-0216)\n\n- bsc#1193880 (CVE-2021-3929)\n\n- bsc#1197653 (CVE-2022-1050)\n\n- bsc#1205808 (CVE-2022-4144), bsc#1198712 (CVE-2022-26354)\n  \n- bsc#1175144 (CVE-2020-17380, CVE-2020-25085, CVE-2021-3409),\n  bsc#1185000 (CVE-2021-3507), bsc#1201367, CVE-2022-35414\n- About bsc#1175144, see also bsc#1182282 (CVE-2021-3409)\n  \n- bsc#1198035, CVE-2021-4206\n","status":"published","published":"2023-03-16T10:35:54Z","modified":"2026-02-04T04:04:51.058114Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"USN-5010-1","title":"qemu vulnerabilities","description":"Lei Sun discovered that QEMU incorrectly handled certain MMIO operations.\nAn attacker inside the guest could possibly use this issue to cause QEMU to\ncrash, resulting in a denial of service. (CVE-2020-15469)\n\nWenxiang Qian discovered that QEMU incorrectly handled certain ATAPI\ncommands. An attacker inside the guest could possibly use this issue to\ncause QEMU to crash, resulting in a denial of service. This issue only\naffected Ubuntu 21.04. (CVE-2020-29443)\n\nCheolwoo Myung discovered that QEMU incorrectly handled SCSI device\nemulation. An attacker inside the guest could possibly use this issue to\ncause QEMU to crash, resulting in a denial of service. (CVE-2020-35504,\nCVE-2020-35505, CVE-2021-3392)\n\nAlex Xu discovered that QEMU incorrectly handled the virtio-fs shared file\nsystem daemon. An attacker inside the guest could possibly use this issue\nto read and write to host devices. This issue only affected Ubuntu 20.10.\n(CVE-2020-35517)\n\nIt was discovered that QEMU incorrectly handled ARM Generic Interrupt\nController emulation. An attacker inside the guest could possibly use this\nissue to cause QEMU to crash, resulting in a denial of service. This issue\nonly affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 20.10.\n(CVE-2021-20221)\n\nAlexander Bulekov, Cheolwoo Myung, Sergej Schumilo, Cornelius Aschermann,\nand Simon Werner discovered that QEMU incorrectly handled e1000 device\nemulation. An attacker inside the guest could possibly use this issue to\ncause QEMU to hang, resulting in a denial of service. This issue only\naffected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 20.10.\n(CVE-2021-20257)\n\nIt was discovered that QEMU incorrectly handled SDHCI controller emulation.\nAn attacker inside the guest could use this issue to cause QEMU to crash,\nresulting in a denial of service, or possibly execute arbitrary code. In\nthe default installation, when QEMU is used in combination with libvirt,\nattackers would be isolated by the libvirt AppArmor profile.\n(CVE-2021-3409)\n\nIt was discovered that QEMU incorrectly handled certain NIC emulation\ndevices. An attacker inside the guest could possibly use this issue to\ncause QEMU to hang or crash, resulting in a denial of service. This issue\nonly affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 20.10.\n(CVE-2021-3416)\n\nRemy Noel discovered that QEMU incorrectly handled the USB redirector\ndevice. An attacker inside the guest could possibly use this issue to\ncause QEMU to consume resources, resulting in a denial of service.\n(CVE-2021-3527)\n\nIt was discovered that QEMU incorrectly handled the virtio vhost-user GPU\ndevice. An attacker inside the guest could possibly use this issue to cause\nQEMU to consume resources, leading to a denial of service. This issue only\naffected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. (CVE-2021-3544)\n\nIt was discovered that QEMU incorrectly handled the virtio vhost-user GPU\ndevice. An attacker inside the guest could possibly use this issue to\nobtain sensitive host information. This issue only affected Ubuntu 20.04\nLTS, Ubuntu 20.10, and Ubuntu 21.04. (CVE-2021-3545)\n\nIt was discovered that QEMU incorrectly handled the virtio vhost-user GPU\ndevice. An attacker inside the guest could use this issue to cause QEMU to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. In the default installation, when QEMU is used in combination with\nlibvirt, attackers would be isolated by the libvirt AppArmor profile. This\nissue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04.\n(CVE-2021-3546)\n\nIt was discovered that QEMU incorrectly handled the PVRDMA device. An\nattacker inside the guest could use this issue to cause QEMU to crash,\nresulting in a denial of service, or possibly execute arbitrary code. In\nthe default installation, when QEMU is used in combination with libvirt,\nattackers would be isolated by the libvirt AppArmor profile. This issue\nonly affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04.\n(CVE-2021-3582, CVE-2021-3607, CVE-2021-3608)\n\nIt was discovered that QEMU SLiRP networking incorrectly handled certain\nudp packets. An attacker inside a guest could possibly use this issue to\nleak sensitive information from the host. (CVE-2021-3592, CVE-2021-3593,\nCVE-2021-3594, CVE-2021-3595)\n","status":"published","published":"2021-07-15T17:53:50Z","modified":"2026-04-27T16:03:35.569511515Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}