CVE-2021-3608CWE-824

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0

published February 24, 2022

CVSS
—
EPSS
0%
Percentile
28.9
In the wild
Unconfirmed
What it is

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest and may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00363 · 28.9th percentile
Weakness
CWE-824 · Access of Uninitialized Pointer
Published
2022-02-24T18:50Z
EPSS history
Timeline
  • 24 FEB 18:50Z
    A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0
    cvelistv5