qemu qemu 内存缓冲区边界内操作的限制不恰当

admin

0
文章

0
评论

2023-12-01 14:50:15 Ali_nvd 来源：ZONE.CI 全球网 0 阅读模式

低危 qemu qemu 内存缓冲区边界内操作的限制不恰当

CVE编号

CVE-2021-3507

利用情况

POC 已公开

补丁情况

官方补丁

披露时间

2021-05-07

漏洞描述

A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario, or potential information leakage from the host memory.

解决建议

下载相关补丁

参考链接
https://bugzilla.redhat.com/show_bug.cgi?id=1951118
https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
https://security.netapp.com/advisory/ntap-20210528-0005/

受影响软件情况

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	应用	qemu	qemu	*		Up to (including) 6.0.0
	运行在以下环境
	系统	alpine_3.16	qemu	*		Up to (excluding) 6.1.0-r0
	运行在以下环境
	系统	alpine_3.17	qemu	*		Up to (excluding) 6.1.0-r0
	运行在以下环境
	系统	alpine_3.18	qemu	*		Up to (excluding) 6.1.0-r0
	运行在以下环境
	系统	alpine_edge	qemu	*		Up to (excluding) 6.1.0-r0
	运行在以下环境
	系统	debian_10	qemu	*		Up to (excluding) 1:3.1+dfsg-8+deb10u9
	运行在以下环境
	系统	debian_11	qemu	*		Up to (excluding) 1:5.2+dfsg-11+deb11u3
	运行在以下环境
	系统	debian_12	qemu	*		Up to (excluding) 1:7.1+dfsg-1
	运行在以下环境
	系统	debian_9	qemu	*		Up to (including) 2.8+dfsg-6+deb9u9
	运行在以下环境
	系统	debian_sid	qemu	*		Up to (excluding) 1:7.1+dfsg-1
	运行在以下环境
	系统	kylinos_aarch64_V10	qemu	*		Up to (excluding) 4.1.0-63.hostos.p06.ky10
	运行在以下环境
	系统	kylinos_aarch64_V10SP1	qemu	*		Up to (excluding) 4.1.0-44.p04.ky10
	运行在以下环境
	系统	kylinos_aarch64_V10SP2	qemu	*		Up to (excluding) 4.1.0-32.p07.ky10
	运行在以下环境
	系统	kylinos_aarch64_V10SP3	qemu	*		Up to (excluding) 4.1.0-63.p16.ky10
	运行在以下环境
	系统	kylinos_loongarch64_V10SP1	qemu-guest-agent	*		Up to (excluding) 4.2.0-34.8.p05.a.ky10
	运行在以下环境
	系统	kylinos_loongarch64_V10SP3	qemu	*		Up to (excluding) 4.1.0-63.p08.a.ky10
	运行在以下环境
	系统	kylinos_x86_64_V10	qemu	*		Up to (excluding) 4.1.0-63.hostos.p06.ky10
	运行在以下环境
	系统	kylinos_x86_64_V10SP1	qemu	*		Up to (excluding) 4.1.0-44.p04.ky10
	运行在以下环境
	系统	kylinos_x86_64_V10SP2	qemu	*		Up to (excluding) 4.1.0-32.p07.ky10
	运行在以下环境
	系统	kylinos_x86_64_V10SP3	qemu	*		Up to (excluding) 4.1.0-63.p16.ky10
	运行在以下环境
	系统	opensuse_5.3	qemu-chardev-spice	*		Up to (excluding) 6.2.0-150400.37.14.2
	运行在以下环境
	系统	opensuse_Leap_15.4	qemu-s390	*		Up to (excluding) 6.2.0-150400.37.14.2
	运行在以下环境
	系统	oracle_7	oraclelinux-release	*		Up to (excluding) 4.2.1-18.el7
	运行在以下环境
	系统	oracle_8	libvirt-daemon-driver-storage-gluster	*		Up to (excluding) 8.0.0-1.module+el8.7.0+20875+5dd40464
	运行在以下环境
	系统	oracle_9	oraclelinux-release	*		Up to (excluding) 7.0.0-13.el9
	运行在以下环境
	系统	redhat_9	qemu-kvm-device-display-virtio-gpu-gl	*		Up to (excluding) 7.0.0-13.el9
	运行在以下环境
	系统	suse_12_SP5	qemu	*		Up to (excluding) 3.1.1.1-66.1
	运行在以下环境
	系统	ubuntu_18.04	qemu	*		Up to (excluding) 1:2.11+dfsg-1ubuntu7.40
	运行在以下环境
	系统	ubuntu_18.04.5_lts	qemu	*		Up to (excluding) 2021-09-16
	运行在以下环境
	系统	ubuntu_20.04	qemu	*		Up to (excluding) 1:4.2-3ubuntu6.23
	运行在以下环境
	系统	ubuntu_21.10	qemu	*		Up to (excluding) 1:6.0+dfsg-2expubuntu1.3
	运行在以下环境
系统	ubuntu_22.04	qemu	*		Up to (excluding) 1:6.2+dfsg-2ubuntu6.2
运行在以下环境
系统	ubuntu_22.10	qemu	*		Up to (excluding) 1:6.2+dfsg-2ubuntu8
运行在以下环境
系统	unionos_a	virt:rhel	*		Up to (excluding) qemu-kvm-6.2.0-20.0.2.module+uelc20+904+d81bf960.1 libvirt-8.0.0-10.0.1.module+uelc20+904+d81bf960 swtpm-0.7.0-4.20211109gitb79fd91.module+uelc20+904+d81bf960.01