CVE-2021-3559CWE-119

A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0

published May 24, 2021

CVSS
—
EPSS
1%
Percentile
63.5
In the wild
Unconfirmed
What it is

A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0. It only affects hosts with a PCI device and driver that supports mediated devices (e.g., GRID driver). This flaw could be used by an unprivileged client with a read-only connection to crash the libvirt daemon by executing the 'nodedev-list' virsh command. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01033 · 63.5th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2021-05-24T11:55Z
EPSS history
Timeline
  • 24 MAY 11:55Z
    A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0
    cvelistv5