CVE-2021-4158

概要

参考情報

• access.redhat.com/security/cve/CVE-2021-4158 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• gitlab.com/qemu-project/qemu/-/commit/9bd6565ccee68f72d5012e24646e12a1c662827e · Patch
• gitlab.com/qemu-project/qemu/-/issues/770 · Exploit
• mail-archive.com/qemu-devel%40nongnu.org/msg857944.html · Patch

qemu のその他の脆弱性

• CVE-2025-54567中 5.4hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.
• CVE-2025-54566中 5.4hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327.
• CVE-2024-7730高 7.8A heap buffer overflow was found in the virtio-snd device in QEMU. When reading input audio in the virtio-snd input callback, virtio_snd_pcm…
• CVE-2024-3447中 6.0A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of…
• CVE-2024-3567中 5.5A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in hw/net/net_tx_pkt.c when trying to calc…