CVE-2021-3930CWE-193

An off-by-one error was found in the SCSI device emulation in QEMU

published February 18, 2022

CVSS
—
EPSS
0%
Percentile
26.1
In the wild
Unconfirmed
What it is

An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in mode_sense_page() if the 'page' argument was set to MODE_PAGE_ALLS (0x3f). A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service condition.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00338 · 26.1th percentile
Weakness
CWE-193 · Off-by-one Error
Published
2022-02-18T17:50Z
EPSS history
Timeline
  • 18 FEB 17:50Z
    An off-by-one error was found in the SCSI device emulation in QEMU
    cvelistv5