CVE-2021-3735

A deadlock issue was found in the AHCI controller device of QEMU. It occurs on a software reset (ahci_reset_port) while handling a host-to-device Register FIS (Frame Information Structure) packet from the guest. A privileged user inside the guest could use this flaw to hang the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability.

CVSS v3 4.4 MEDIUM

4.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/security/cve/CVE-2021-3735	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1997184	Issue Tracking Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2021-3735	Third Party Advisory
https://access.redhat.com/security/cve/CVE-2021-3735	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1997184	Issue Tracking Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2021-3735	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:qemu:qemu:6.1.0:rc4:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:o:debian:debian_linux:10.0:::::::*
	cpe:2.3:o:debian:debian_linux:11.0:::::::*

History

21 Nov 2024, 06:22

Type	Values Removed	Values Added
References	~~() https://access.redhat.com/security/cve/CVE-2021-3735 - Third Party Advisory~~	() https://access.redhat.com/security/cve/CVE-2021-3735 - Third Party Advisory
References	~~() https://bugzilla.redhat.com/show_bug.cgi?id=1997184 - Issue Tracking, Third Party Advisory~~	() https://bugzilla.redhat.com/show_bug.cgi?id=1997184 - Issue Tracking, Third Party Advisory
References	~~() https://security-tracker.debian.org/tracker/CVE-2021-3735 - Third Party Advisory~~	() https://security-tracker.debian.org/tracker/CVE-2021-3735 - Third Party Advisory

Information

Published : 2022-08-26 16:15

Updated : 2024-11-21 06:22

NVD link : CVE-2021-3735

Mitre link : CVE-2021-3735

CVE.ORG link : CVE-2021-3735

JSON object : View

Products Affected

debian

debian_linux

qemu

qemu

CWE

CWE-667

Improper Locking

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2021-3735", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 0.8}]}, "published": "2022-08-26T16:15:09.467", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2021-3735", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1997184", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "https://security-tracker.debian.org/tracker/CVE-2021-3735", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2021-3735", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1997184", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://security-tracker.debian.org/tracker/CVE-2021-3735", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-667"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-400"}, {"lang": "en", "value": "CWE-667"}]}], "descriptions": [{"lang": "en", "value": "A deadlock issue was found in the AHCI controller device of QEMU. It occurs on a software reset (ahci_reset_port) while handling a host-to-device Register FIS (Frame Information Structure) packet from the guest. A privileged user inside the guest could use this flaw to hang the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability."}, {"lang": "es", "value": "Se ha encontrado un problema de bloqueo en el dispositivo controlador AHCI de QEMU. Es producido en un reinicio de software (ahci_reset_port) mientras es manejado un paquete FIS (Frame Information Structure) de registro de host a dispositivo desde el hu\u00e9sped. Un usuario privilegiado dentro del hu\u00e9sped podr\u00eda usar este fallo para colgar el proceso de QEMU en el host, resultando en una condici\u00f3n de denegaci\u00f3n de servicio. La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema."}], "lastModified": "2024-11-21T06:22:17.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:qemu:qemu:6.1.0:rc4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AFBBA57-5E54-4B05-ABEB-826E08CE7A07"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"}, {"criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}