vulnerability

Rocky Linux: CVE-2021-3611: qemu-kvm (RLSA-2022-7967)

Severity
2
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:P)
Published
May 11, 2022
Added
Mar 12, 2024
Modified
Nov 15, 2024

Description

A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. This flaw affects QEMU versions prior to 7.0.0.

Solution(s)

rocky-upgrade-qemu-guest-agentrocky-upgrade-qemu-guest-agent-debuginforocky-upgrade-qemu-imgrocky-upgrade-qemu-img-debuginforocky-upgrade-qemu-kvmrocky-upgrade-qemu-kvm-audio-parocky-upgrade-qemu-kvm-audio-pa-debuginforocky-upgrade-qemu-kvm-block-curlrocky-upgrade-qemu-kvm-block-curl-debuginforocky-upgrade-qemu-kvm-block-rbdrocky-upgrade-qemu-kvm-block-rbd-debuginforocky-upgrade-qemu-kvm-commonrocky-upgrade-qemu-kvm-common-debuginforocky-upgrade-qemu-kvm-corerocky-upgrade-qemu-kvm-core-debuginforocky-upgrade-qemu-kvm-debuginforocky-upgrade-qemu-kvm-debugsourcerocky-upgrade-qemu-kvm-device-display-virtio-gpurocky-upgrade-qemu-kvm-device-display-virtio-gpu-ccwrocky-upgrade-qemu-kvm-device-display-virtio-gpu-ccw-debuginforocky-upgrade-qemu-kvm-device-display-virtio-gpu-debuginforocky-upgrade-qemu-kvm-device-display-virtio-gpu-glrocky-upgrade-qemu-kvm-device-display-virtio-gpu-gl-debuginforocky-upgrade-qemu-kvm-device-display-virtio-gpu-pcirocky-upgrade-qemu-kvm-device-display-virtio-gpu-pci-debuginforocky-upgrade-qemu-kvm-device-display-virtio-gpu-pci-glrocky-upgrade-qemu-kvm-device-display-virtio-gpu-pci-gl-debuginforocky-upgrade-qemu-kvm-device-display-virtio-vgarocky-upgrade-qemu-kvm-device-display-virtio-vga-debuginforocky-upgrade-qemu-kvm-device-display-virtio-vga-glrocky-upgrade-qemu-kvm-device-display-virtio-vga-gl-debuginforocky-upgrade-qemu-kvm-device-usb-hostrocky-upgrade-qemu-kvm-device-usb-host-debuginforocky-upgrade-qemu-kvm-device-usb-redirectrocky-upgrade-qemu-kvm-device-usb-redirect-debuginforocky-upgrade-qemu-kvm-docsrocky-upgrade-qemu-kvm-toolsrocky-upgrade-qemu-kvm-tools-debuginforocky-upgrade-qemu-kvm-ui-egl-headlessrocky-upgrade-qemu-kvm-ui-egl-headless-debuginforocky-upgrade-qemu-kvm-ui-openglrocky-upgrade-qemu-kvm-ui-opengl-debuginforocky-upgrade-qemu-pr-helperrocky-upgrade-qemu-pr-helper-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.