CVE-2021-3930 - log back

CVE-2021-3930 edited at 07 Nov 2021 13:08:49
References
https://bugzilla.redhat.com/show_bug.cgi?id=2020588
+ https://bugs.launchpad.net/qemu/+bug/1914638
+ https://gitlab.com/qemu-project/qemu/-/issues/546
+ https://www.mail-archive.com/qemu-devel@nongnu.org/msg779652.html
CVE-2021-3930 edited at 05 Nov 2021 10:35:27
Severity
- Unknown
+ Low
Remote
- Unknown
+ Local
Type
- Unknown
+ Denial of service
Description
+ An off-by-one error was found in the SCSI Device emulation in QEMU. It could occur in hw/scsi/scsi-disk.c:mode_sense_page() while processing MODE SELECT commands if 'page' was set to MODE_PAGE_ALLS (0x3f). Specifically, 'page' was used to index the stack-allocated 'mode_sense_valid' buffer (size=0x3f), causing an off-by-one error when trying to access the last element. A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service condition.
References
+ https://bugzilla.redhat.com/show_bug.cgi?id=2020588
CVE-2021-3930 created at 05 Nov 2021 10:35:01
Severity
+ Unknown
Remote
+ Unknown
Type
+ Unknown
Description
References
Notes