CVE-2021-3582CWE-119

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device

published March 25, 2022

CVSS
—
EPSS
0%
Percentile
31.5
In the wild
Unconfirmed
What it is

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMA_CMD_CREATE_MR" command due to improper memory remapping (mremap). This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00386 · 31.5th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2022-03-25T18:02Z
EPSS history
Timeline
  • 25 MAR 18:02Z
    A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device
    cvelistv5