CVE-2021-3527

描述

A flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined into a single, large transfer request, to reduce the overhead and improve performance. The combined size of the bulk transfer is used to dynamically allocate a variable length array (VLA) on the stack without proper validation. Since the total size is not bounded, a malicious guest could use this flaw to influence the array length and cause the QEMU process to perform an excessive allocation on the stack, resulting in a denial of service.

如何修補 CVE-2021-3527

要修補 CVE-2021-3527,請將受影響套件升級到下列已修補版本。

• —升級至 1:5.2+dfsg-11 或更新版本
• —升級至 1:2.8+dfsg-6+deb9u15 或更新版本

CVE-2021-3527 正在被利用嗎?

低 — EPSS 為 0.4%,目前沒有觀察到大規模利用活動。

受影響套件(2)

• from 0, < 1:5.2+dfsg-11
• from 0, < 1:2.8+dfsg-6+deb9u15

CVSS 分數

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2021-3527