Unrated
A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvme_changed_nslist() where a malicious guest controlling certain in...
CVE-2021-3947
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2021-3947 qemu Fixed in: 1:6.2+dfsg-1
Original description The description as published by the source.
A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvme_changed_nslist() where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information.
References
- advisory security.gentoo.org
- advisory security.netapp.com
- patch bugzilla.redhat.com