cve/2021/CVE-2021-3611.md

18 lines
825 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2021-3611](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3611)
![](https://img.shields.io/static/v1?label=Product&message=QEMU&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20QEMU%20versions%20prior%20to%207.0.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-119&color=brighgreen)
### Description
A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. This flaw affects QEMU versions prior to 7.0.0.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/ARPSyndicate/cvemon