CVE-2021-3607CWE-190

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0

published February 24, 2022

CVSS
—
EPSS
0%
Percentile
21.5
In the wild
Unconfirmed
What it is

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00299 · 21.5th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2022-02-24T18:50Z
EPSS history
Timeline
  • 24 FEB 18:50Z
    An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0
    cvelistv5