vulnerability

CentOS Linux: CVE-2021-3611: Moderate: qemu-kvm security, bug fix, and enhancement update (CESA-2022:7967)

Severity
2
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:P)
Published
2022-05-11
Added
2022-11-16
Modified
2023-05-25

Description

A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. This flaw affects QEMU versions prior to 7.0.0.

Solution(s)

centos-upgrade-qemu-guest-agentcentos-upgrade-qemu-guest-agent-debuginfocentos-upgrade-qemu-imgcentos-upgrade-qemu-img-debuginfocentos-upgrade-qemu-kvmcentos-upgrade-qemu-kvm-audio-pacentos-upgrade-qemu-kvm-audio-pa-debuginfocentos-upgrade-qemu-kvm-block-curlcentos-upgrade-qemu-kvm-block-curl-debuginfocentos-upgrade-qemu-kvm-block-rbdcentos-upgrade-qemu-kvm-block-rbd-debuginfocentos-upgrade-qemu-kvm-commoncentos-upgrade-qemu-kvm-common-debuginfocentos-upgrade-qemu-kvm-corecentos-upgrade-qemu-kvm-core-debuginfocentos-upgrade-qemu-kvm-debuginfocentos-upgrade-qemu-kvm-debugsourcecentos-upgrade-qemu-kvm-device-display-virtio-gpucentos-upgrade-qemu-kvm-device-display-virtio-gpu-debuginfocentos-upgrade-qemu-kvm-device-display-virtio-gpu-glcentos-upgrade-qemu-kvm-device-display-virtio-gpu-gl-debuginfocentos-upgrade-qemu-kvm-device-display-virtio-gpu-pcicentos-upgrade-qemu-kvm-device-display-virtio-gpu-pci-debuginfocentos-upgrade-qemu-kvm-device-display-virtio-gpu-pci-glcentos-upgrade-qemu-kvm-device-display-virtio-gpu-pci-gl-debuginfocentos-upgrade-qemu-kvm-device-display-virtio-vgacentos-upgrade-qemu-kvm-device-display-virtio-vga-debuginfocentos-upgrade-qemu-kvm-device-display-virtio-vga-glcentos-upgrade-qemu-kvm-device-display-virtio-vga-gl-debuginfocentos-upgrade-qemu-kvm-device-usb-hostcentos-upgrade-qemu-kvm-device-usb-host-debuginfocentos-upgrade-qemu-kvm-device-usb-redirectcentos-upgrade-qemu-kvm-device-usb-redirect-debuginfocentos-upgrade-qemu-kvm-docscentos-upgrade-qemu-kvm-tests-debuginfocentos-upgrade-qemu-kvm-toolscentos-upgrade-qemu-kvm-tools-debuginfocentos-upgrade-qemu-kvm-ui-egl-headlesscentos-upgrade-qemu-kvm-ui-egl-headless-debuginfocentos-upgrade-qemu-kvm-ui-openglcentos-upgrade-qemu-kvm-ui-opengl-debuginfocentos-upgrade-qemu-pr-helpercentos-upgrade-qemu-pr-helper-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.