CVE Vulnerability

CVE-2021-20221

An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4.2.0on aarch64 platform. The issue occurs because while writing an interrupt ID to the controller memory area, it is not masked to be 4 bits wide. It may lead to the said issue while updating controller state fields and their subsequent processing. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.

2.1 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

Scope

6 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.5 / Impact : 4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html Mailing List Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1924601 Issue Tracking Patch
http://www.openwall.com/lists/oss-security/2021/02/05/1 Mailing List Patch
https://security.netapp.com/advisory/ntap-20210708-0005/ Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html Mailing List Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:arm64:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Information

Published : 2021-05-13 04:15

Updated : 2023-02-12 10:15

NVD link : CVE-2021-20221

Mitre link : CVE-2021-20221

Products Affected
No products.
CWE
CWE-125

Out-of-bounds Read

CWE-787