CVE-2021-3930
CVE-2021-3930
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.3%KEV nãoPoC —Patch referenciado
Lifecycle
18 Feb 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in mode_sense_page() if the 'page' argument was set to MODE_PAGE_ALLS (0x3f). A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service condition.
Affected products
n/a · QEMUWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →