CVE-2021-3593

CVE Details

Release Date:2021-06-15

Description


An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.

See more information about CVE-2021-3593 from MITRE CVE dictionary and NIST NVD


CVSS v3.0 metrics


NOTE: The following CVSS v3.0 metrics and score provided are preliminary and subject to review.

Base Score: 3.8 Base Metrics: AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Access Vector: Local network Attack Complexity: Low
Privileges Required: Low User Interaction: None
Scope: Changed Confidentiality Impact: Low
Integrity Impact: None Availability Impact: None

Errata information


PlatformErrataRelease Date
Oracle Linux version 7 (qemu)ELSA-2021-96382022-01-04
Oracle Linux version 8 (hivex)ELSA-2021-41912021-11-16
Oracle Linux version 8 (hivex)ELSA-2022-91722022-02-25
Oracle Linux version 8 (libguestfs)ELSA-2021-41912021-11-16
Oracle Linux version 8 (libguestfs)ELSA-2022-91722022-02-25
Oracle Linux version 8 (libguestfs-winsupport)ELSA-2021-41912021-11-16
Oracle Linux version 8 (libguestfs-winsupport)ELSA-2022-91722022-02-25
Oracle Linux version 8 (libiscsi)ELSA-2021-41912021-11-16
Oracle Linux version 8 (libiscsi)ELSA-2022-91722022-02-25
Oracle Linux version 8 (libnbd)ELSA-2021-41912021-11-16
Oracle Linux version 8 (libnbd)ELSA-2022-91722022-02-25
Oracle Linux version 8 (libvirt)ELSA-2021-41912021-11-16
Oracle Linux version 8 (libvirt)ELSA-2022-91722022-02-25
Oracle Linux version 8 (libvirt-dbus)ELSA-2021-41912021-11-16
Oracle Linux version 8 (libvirt-dbus)ELSA-2022-91722022-02-25
Oracle Linux version 8 (libvirt-python)ELSA-2021-41912021-11-16
Oracle Linux version 8 (libvirt-python)ELSA-2022-91722022-02-25
Oracle Linux version 8 (nbdkit)ELSA-2021-41912021-11-16
Oracle Linux version 8 (nbdkit)ELSA-2022-91722022-02-25
Oracle Linux version 8 (netcf)ELSA-2021-41912021-11-16
Oracle Linux version 8 (netcf)ELSA-2022-91722022-02-25
Oracle Linux version 8 (perl-Sys-Virt)ELSA-2021-41912021-11-16
Oracle Linux version 8 (perl-Sys-Virt)ELSA-2022-91722022-02-25
Oracle Linux version 8 (qemu-kvm)ELSA-2021-41912021-11-16
Oracle Linux version 8 (qemu-kvm)ELSA-2022-91722022-02-25
Oracle Linux version 8 (seabios)ELSA-2021-41912021-11-16
Oracle Linux version 8 (seabios)ELSA-2022-91722022-02-25
Oracle Linux version 8 (sgabios)ELSA-2021-41912021-11-16
Oracle Linux version 8 (sgabios)ELSA-2022-91722022-02-25
Oracle Linux version 8 (supermin)ELSA-2021-41912021-11-16
Oracle Linux version 8 (supermin)ELSA-2022-91722022-02-25



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete