Rapid7 Vulnerability & Exploit Database

Rocky Linux: CVE-2021-20221: Moderate: virt:rhel and virt-devel:rhel security and bug fix update (RLSA-2021-3061)

Back to Search

Rocky Linux: CVE-2021-20221: Moderate: virt:rhel and virt-devel:rhel security and bug fix update (RLSA-2021-3061)

Severity
2
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:P)
Published
05/13/2021
Created
05/06/2022
Added
05/05/2022
Modified
05/05/2022

Description

An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4.2.0on aarch64 platform. The issue occurs because while writing an interrupt ID to the controller memory area, it is not masked to be 4 bits wide. It may lead to the said issue while updating controller state fields and their subsequent processing. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.

Solution(s)

  • rocky-upgrade-hivex
  • rocky-upgrade-hivex-debuginfo
  • rocky-upgrade-hivex-debugsource
  • rocky-upgrade-hivex-devel
  • rocky-upgrade-libguestfs
  • rocky-upgrade-libguestfs-bash-completion
  • rocky-upgrade-libguestfs-benchmarking
  • rocky-upgrade-libguestfs-benchmarking-debuginfo
  • rocky-upgrade-libguestfs-debuginfo
  • rocky-upgrade-libguestfs-debugsource
  • rocky-upgrade-libguestfs-devel
  • rocky-upgrade-libguestfs-gfs2
  • rocky-upgrade-libguestfs-gobject
  • rocky-upgrade-libguestfs-gobject-debuginfo
  • rocky-upgrade-libguestfs-gobject-devel
  • rocky-upgrade-libguestfs-inspect-icons
  • rocky-upgrade-libguestfs-java
  • rocky-upgrade-libguestfs-java-debuginfo
  • rocky-upgrade-libguestfs-java-devel
  • rocky-upgrade-libguestfs-javadoc
  • rocky-upgrade-libguestfs-man-pages-ja
  • rocky-upgrade-libguestfs-man-pages-uk
  • rocky-upgrade-libguestfs-rescue
  • rocky-upgrade-libguestfs-rsync
  • rocky-upgrade-libguestfs-tools
  • rocky-upgrade-libguestfs-tools-c
  • rocky-upgrade-libguestfs-tools-c-debuginfo
  • rocky-upgrade-libguestfs-xfs
  • rocky-upgrade-libnbd
  • rocky-upgrade-libnbd-debuginfo
  • rocky-upgrade-libnbd-debugsource
  • rocky-upgrade-libnbd-devel
  • rocky-upgrade-libvirt
  • rocky-upgrade-libvirt-admin
  • rocky-upgrade-libvirt-admin-debuginfo
  • rocky-upgrade-libvirt-bash-completion
  • rocky-upgrade-libvirt-client
  • rocky-upgrade-libvirt-client-debuginfo
  • rocky-upgrade-libvirt-daemon
  • rocky-upgrade-libvirt-daemon-config-network
  • rocky-upgrade-libvirt-daemon-config-nwfilter
  • rocky-upgrade-libvirt-daemon-debuginfo
  • rocky-upgrade-libvirt-daemon-driver-interface
  • rocky-upgrade-libvirt-daemon-driver-interface-debuginfo
  • rocky-upgrade-libvirt-daemon-driver-network
  • rocky-upgrade-libvirt-daemon-driver-network-debuginfo
  • rocky-upgrade-libvirt-daemon-driver-nodedev
  • rocky-upgrade-libvirt-daemon-driver-nodedev-debuginfo
  • rocky-upgrade-libvirt-daemon-driver-nwfilter
  • rocky-upgrade-libvirt-daemon-driver-nwfilter-debuginfo
  • rocky-upgrade-libvirt-daemon-driver-qemu
  • rocky-upgrade-libvirt-daemon-driver-qemu-debuginfo
  • rocky-upgrade-libvirt-daemon-driver-secret
  • rocky-upgrade-libvirt-daemon-driver-secret-debuginfo
  • rocky-upgrade-libvirt-daemon-driver-storage
  • rocky-upgrade-libvirt-daemon-driver-storage-core
  • rocky-upgrade-libvirt-daemon-driver-storage-core-debuginfo
  • rocky-upgrade-libvirt-daemon-driver-storage-disk
  • rocky-upgrade-libvirt-daemon-driver-storage-disk-debuginfo
  • rocky-upgrade-libvirt-daemon-driver-storage-gluster
  • rocky-upgrade-libvirt-daemon-driver-storage-gluster-debuginfo
  • rocky-upgrade-libvirt-daemon-driver-storage-iscsi
  • rocky-upgrade-libvirt-daemon-driver-storage-iscsi-debuginfo
  • rocky-upgrade-libvirt-daemon-driver-storage-iscsi-direct
  • rocky-upgrade-libvirt-daemon-driver-storage-iscsi-direct-debuginfo
  • rocky-upgrade-libvirt-daemon-driver-storage-logical
  • rocky-upgrade-libvirt-daemon-driver-storage-logical-debuginfo
  • rocky-upgrade-libvirt-daemon-driver-storage-mpath
  • rocky-upgrade-libvirt-daemon-driver-storage-mpath-debuginfo
  • rocky-upgrade-libvirt-daemon-driver-storage-rbd
  • rocky-upgrade-libvirt-daemon-driver-storage-rbd-debuginfo
  • rocky-upgrade-libvirt-daemon-driver-storage-scsi
  • rocky-upgrade-libvirt-daemon-driver-storage-scsi-debuginfo
  • rocky-upgrade-libvirt-daemon-kvm
  • rocky-upgrade-libvirt-debuginfo
  • rocky-upgrade-libvirt-debugsource
  • rocky-upgrade-libvirt-devel
  • rocky-upgrade-libvirt-docs
  • rocky-upgrade-libvirt-libs
  • rocky-upgrade-libvirt-libs-debuginfo
  • rocky-upgrade-libvirt-lock-sanlock
  • rocky-upgrade-libvirt-lock-sanlock-debuginfo
  • rocky-upgrade-libvirt-nss
  • rocky-upgrade-libvirt-nss-debuginfo
  • rocky-upgrade-libvirt-python
  • rocky-upgrade-libvirt-python-debugsource
  • rocky-upgrade-lua-guestfs
  • rocky-upgrade-lua-guestfs-debuginfo
  • rocky-upgrade-nbdfuse
  • rocky-upgrade-nbdfuse-debuginfo
  • rocky-upgrade-nbdkit
  • rocky-upgrade-nbdkit-bash-completion
  • rocky-upgrade-nbdkit-basic-filters
  • rocky-upgrade-nbdkit-basic-filters-debuginfo
  • rocky-upgrade-nbdkit-basic-plugins
  • rocky-upgrade-nbdkit-basic-plugins-debuginfo
  • rocky-upgrade-nbdkit-curl-plugin
  • rocky-upgrade-nbdkit-curl-plugin-debuginfo
  • rocky-upgrade-nbdkit-debuginfo
  • rocky-upgrade-nbdkit-debugsource
  • rocky-upgrade-nbdkit-devel
  • rocky-upgrade-nbdkit-example-plugins
  • rocky-upgrade-nbdkit-example-plugins-debuginfo
  • rocky-upgrade-nbdkit-gzip-plugin
  • rocky-upgrade-nbdkit-gzip-plugin-debuginfo
  • rocky-upgrade-nbdkit-linuxdisk-plugin
  • rocky-upgrade-nbdkit-linuxdisk-plugin-debuginfo
  • rocky-upgrade-nbdkit-python-plugin
  • rocky-upgrade-nbdkit-python-plugin-debuginfo
  • rocky-upgrade-nbdkit-server
  • rocky-upgrade-nbdkit-server-debuginfo
  • rocky-upgrade-nbdkit-ssh-plugin
  • rocky-upgrade-nbdkit-ssh-plugin-debuginfo
  • rocky-upgrade-nbdkit-vddk-plugin
  • rocky-upgrade-nbdkit-vddk-plugin-debuginfo
  • rocky-upgrade-nbdkit-xz-filter
  • rocky-upgrade-nbdkit-xz-filter-debuginfo
  • rocky-upgrade-ocaml-hivex
  • rocky-upgrade-ocaml-hivex-debuginfo
  • rocky-upgrade-ocaml-hivex-devel
  • rocky-upgrade-ocaml-libguestfs
  • rocky-upgrade-ocaml-libguestfs-debuginfo
  • rocky-upgrade-ocaml-libguestfs-devel
  • rocky-upgrade-ocaml-libnbd
  • rocky-upgrade-ocaml-libnbd-debuginfo
  • rocky-upgrade-ocaml-libnbd-devel
  • rocky-upgrade-perl-Sys-Guestfs
  • rocky-upgrade-perl-Sys-Guestfs-debuginfo
  • rocky-upgrade-perl-Sys-Virt
  • rocky-upgrade-perl-Sys-Virt-debuginfo
  • rocky-upgrade-perl-Sys-Virt-debugsource
  • rocky-upgrade-perl-hivex
  • rocky-upgrade-perl-hivex-debuginfo
  • rocky-upgrade-python3-hivex
  • rocky-upgrade-python3-hivex-debuginfo
  • rocky-upgrade-python3-libguestfs
  • rocky-upgrade-python3-libguestfs-debuginfo
  • rocky-upgrade-python3-libnbd
  • rocky-upgrade-python3-libnbd-debuginfo
  • rocky-upgrade-python3-libvirt
  • rocky-upgrade-python3-libvirt-debuginfo
  • rocky-upgrade-qemu-guest-agent
  • rocky-upgrade-qemu-guest-agent-debuginfo
  • rocky-upgrade-qemu-img
  • rocky-upgrade-qemu-img-debuginfo
  • rocky-upgrade-qemu-kvm
  • rocky-upgrade-qemu-kvm-block-curl
  • rocky-upgrade-qemu-kvm-block-curl-debuginfo
  • rocky-upgrade-qemu-kvm-block-gluster
  • rocky-upgrade-qemu-kvm-block-gluster-debuginfo
  • rocky-upgrade-qemu-kvm-block-iscsi
  • rocky-upgrade-qemu-kvm-block-iscsi-debuginfo
  • rocky-upgrade-qemu-kvm-block-rbd
  • rocky-upgrade-qemu-kvm-block-rbd-debuginfo
  • rocky-upgrade-qemu-kvm-block-ssh
  • rocky-upgrade-qemu-kvm-block-ssh-debuginfo
  • rocky-upgrade-qemu-kvm-common
  • rocky-upgrade-qemu-kvm-common-debuginfo
  • rocky-upgrade-qemu-kvm-core
  • rocky-upgrade-qemu-kvm-core-debuginfo
  • rocky-upgrade-qemu-kvm-debuginfo
  • rocky-upgrade-qemu-kvm-debugsource
  • rocky-upgrade-qemu-kvm-tests
  • rocky-upgrade-qemu-kvm-tests-debuginfo
  • rocky-upgrade-ruby-hivex
  • rocky-upgrade-ruby-hivex-debuginfo
  • rocky-upgrade-ruby-libguestfs
  • rocky-upgrade-ruby-libguestfs-debuginfo
  • rocky-upgrade-seabios
  • rocky-upgrade-seabios-bin
  • rocky-upgrade-seavgabios-bin
  • rocky-upgrade-sgabios
  • rocky-upgrade-sgabios-bin
  • rocky-upgrade-supermin
  • rocky-upgrade-supermin-debuginfo
  • rocky-upgrade-supermin-debugsource
  • rocky-upgrade-supermin-devel
  • rocky-upgrade-virt-dib
  • rocky-upgrade-virt-dib-debuginfo
  • rocky-upgrade-virt-v2v
  • rocky-upgrade-virt-v2v-debuginfo

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;