CVE-2021-3638
Fixed in a distro release EPSS <1%
An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.
Products: qemu, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | qemu | 1:5.2+dfsg-11+deb11u1 |
| Debian 12 | qemu | 1:6.1+dfsg-6 |
| Debian 13 | qemu | 1:6.1+dfsg-6 |
| Debian 14 | qemu | 1:6.1+dfsg-6 |
| SUSE Enterprise Storage 7.1 | qemu | 5.2.0-150300.127.3 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | qemu | 4.2.1-150200.79.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | qemu | 5.2.0-150300.127.3 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | qemu | 5.2.0-150300.127.3 |
| SUSE Linux Enterprise Micro 5.1 | qemu | 5.2.0-150300.127.3 |
| SUSE Linux Enterprise Micro 5.2 | qemu | 5.2.0-150300.127.3 |
| SUSE Linux Enterprise Micro 5.3 | qemu | 6.2.0-150400.37.23.1 |
| SUSE Linux Enterprise Micro 5.4 | qemu | 6.2.0-150400.37.23.1 |
| SUSE Linux Enterprise Micro 5.5 | qemu | 7.1.0-150500.49.9.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | qemu | 6.2.0-150400.37.23.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | qemu | 7.1.0-150500.49.9.2 |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | qemu | 7.1.0-150500.49.9.2 |
| SUSE Linux Enterprise Module for Server Applications 15 SP4 | qemu | 6.2.0-150400.37.23.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP5 | qemu | 7.1.0-150500.49.9.2 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | qemu | 4.2.1-150200.79.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | qemu | 5.2.0-150300.127.3 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | qemu | 4.2.1-150200.79.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | qemu | 5.2.0-150300.127.3 |
| SUSE Manager Proxy 4.2 | qemu | 5.2.0-150300.127.3 |
| SUSE Manager Server 4.2 | qemu | 5.2.0-150300.127.3 |
| Ubuntu 20.04 LTS | qemu | 1:4.2-3ubuntu6.28 |
| Ubuntu 22.04 LTS | qemu | 1:6.2+dfsg-2ubuntu6.16 |
| openSUSE Leap 15.4 | qemu | 6.2.0-150400.37.23.1 |
| openSUSE Leap 15.4 | qemu | 4.2.1-150200.79.1 |
| openSUSE Leap 15.5 | qemu | 7.1.0-150500.49.9.2 |