UBUNTU-CVE-2021-3507

See a problem?

Source

https://ubuntu.com/security/notices/UBUNTU-CVE-2021-3507

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-3507.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2021-3507

Related

Published

2021-05-06T16:15:00Z

Modified

2021-05-06T16:15:00Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L CVSS Calculator

Summary

[none]

Details

A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrltransferhandler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario, or potential information leakage from the host memory.

References

Affected packages

Ubuntu:Pro:14.04:LTS / qemu

Package

Name: qemu

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.5.0+dfsg-3ubuntu5

1.5.0+dfsg-3ubuntu6

1.6.0+dfsg-2ubuntu1

1.6.0+dfsg-2ubuntu2

1.6.0+dfsg-2ubuntu3

1.6.0+dfsg-2ubuntu4

1.7.0+dfsg-2ubuntu1

1.7.0+dfsg-2ubuntu2

1.7.0+dfsg-2ubuntu3

1.7.0+dfsg-2ubuntu4

1.7.0+dfsg-2ubuntu5

1.7.0+dfsg-2ubuntu7

1.7.0+dfsg-2ubuntu8

1.7.0+dfsg-2ubuntu9

1.7.0+dfsg-3ubuntu1~ppa1

1.7.0+dfsg-3ubuntu1

1.7.0+dfsg-3ubuntu2

1.7.0+dfsg-3ubuntu3

1.7.0+dfsg-3ubuntu4

1.7.0+dfsg-3ubuntu5

1.7.0+dfsg-3ubuntu6

1.7.0+dfsg-3ubuntu7

2.*

2.0.0~rc1+dfsg-0ubuntu1

2.0.0~rc1+dfsg-0ubuntu2

2.0.0~rc1+dfsg-0ubuntu3

2.0.0~rc1+dfsg-0ubuntu3.1

2.0.0+dfsg-2ubuntu1

2.0.0+dfsg-2ubuntu1.1

2.0.0+dfsg-2ubuntu1.2

2.0.0+dfsg-2ubuntu1.3

2.0.0+dfsg-2ubuntu1.5

2.0.0+dfsg-2ubuntu1.6

2.0.0+dfsg-2ubuntu1.7

2.0.0+dfsg-2ubuntu1.8

2.0.0+dfsg-2ubuntu1.9

2.0.0+dfsg-2ubuntu1.10

2.0.0+dfsg-2ubuntu1.11

2.0.0+dfsg-2ubuntu1.13

2.0.0+dfsg-2ubuntu1.14

2.0.0+dfsg-2ubuntu1.15

2.0.0+dfsg-2ubuntu1.16

2.0.0+dfsg-2ubuntu1.17

2.0.0+dfsg-2ubuntu1.18

2.0.0+dfsg-2ubuntu1.19

2.0.0+dfsg-2ubuntu1.20

2.0.0+dfsg-2ubuntu1.21

2.0.0+dfsg-2ubuntu1.22

2.0.0+dfsg-2ubuntu1.24

2.0.0+dfsg-2ubuntu1.25

2.0.0+dfsg-2ubuntu1.26

2.0.0+dfsg-2ubuntu1.27

2.0.0+dfsg-2ubuntu1.28

2.0.0+dfsg-2ubuntu1.29

2.0.0+dfsg-2ubuntu1.30

2.0.0+dfsg-2ubuntu1.31

2.0.0+dfsg-2ubuntu1.32

2.0.0+dfsg-2ubuntu1.33

2.0.0+dfsg-2ubuntu1.34

2.0.0+dfsg-2ubuntu1.35

2.0.0+dfsg-2ubuntu1.36

2.0.0+dfsg-2ubuntu1.38

2.0.0+dfsg-2ubuntu1.39

2.0.0+dfsg-2ubuntu1.40

2.0.0+dfsg-2ubuntu1.41

2.0.0+dfsg-2ubuntu1.42

2.0.0+dfsg-2ubuntu1.43

2.0.0+dfsg-2ubuntu1.44

2.0.0+dfsg-2ubuntu1.45

2.0.0+dfsg-2ubuntu1.46

2.0.0+dfsg-2ubuntu1.47

2.0.0+dfsg-2ubuntu1.47+esm1

2.0.0+dfsg-2ubuntu1.47+esm2

2.0.0+dfsg-2ubuntu1.47+esm3

Ecosystem specific

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:16.04:LTS / qemu

Package

Name: qemu

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:2.*

1:2.3+dfsg-5ubuntu9

1:2.3+dfsg-5ubuntu10

1:2.4+dfsg-4ubuntu1

1:2.4+dfsg-4ubuntu2

1:2.4+dfsg-4ubuntu3

1:2.4+dfsg-5ubuntu3

1:2.5+dfsg-1ubuntu2

1:2.5+dfsg-1ubuntu3

1:2.5+dfsg-1ubuntu4

1:2.5+dfsg-1ubuntu5

1:2.5+dfsg-5ubuntu1

1:2.5+dfsg-5ubuntu2

1:2.5+dfsg-5ubuntu4

1:2.5+dfsg-5ubuntu6

1:2.5+dfsg-5ubuntu7

1:2.5+dfsg-5ubuntu10

1:2.5+dfsg-5ubuntu10.1

1:2.5+dfsg-5ubuntu10.2

1:2.5+dfsg-5ubuntu10.3

1:2.5+dfsg-5ubuntu10.4

1:2.5+dfsg-5ubuntu10.5

1:2.5+dfsg-5ubuntu10.6

1:2.5+dfsg-5ubuntu10.7

1:2.5+dfsg-5ubuntu10.8

1:2.5+dfsg-5ubuntu10.9

1:2.5+dfsg-5ubuntu10.10

1:2.5+dfsg-5ubuntu10.11

1:2.5+dfsg-5ubuntu10.13

1:2.5+dfsg-5ubuntu10.14

1:2.5+dfsg-5ubuntu10.15

1:2.5+dfsg-5ubuntu10.16

1:2.5+dfsg-5ubuntu10.20

1:2.5+dfsg-5ubuntu10.21

1:2.5+dfsg-5ubuntu10.22

1:2.5+dfsg-5ubuntu10.24

1:2.5+dfsg-5ubuntu10.25

1:2.5+dfsg-5ubuntu10.26

1:2.5+dfsg-5ubuntu10.28

1:2.5+dfsg-5ubuntu10.29

1:2.5+dfsg-5ubuntu10.30

1:2.5+dfsg-5ubuntu10.31

1:2.5+dfsg-5ubuntu10.32

1:2.5+dfsg-5ubuntu10.33

1:2.5+dfsg-5ubuntu10.34

1:2.5+dfsg-5ubuntu10.35

1:2.5+dfsg-5ubuntu10.36

1:2.5+dfsg-5ubuntu10.37

1:2.5+dfsg-5ubuntu10.38

1:2.5+dfsg-5ubuntu10.39

1:2.5+dfsg-5ubuntu10.40

1:2.5+dfsg-5ubuntu10.41

1:2.5+dfsg-5ubuntu10.42

1:2.5+dfsg-5ubuntu10.43

1:2.5+dfsg-5ubuntu10.44

1:2.5+dfsg-5ubuntu10.45

1:2.5+dfsg-5ubuntu10.46

1:2.5+dfsg-5ubuntu10.47

1:2.5+dfsg-5ubuntu10.48

1:2.5+dfsg-5ubuntu10.49

1:2.5+dfsg-5ubuntu10.51

1:2.5+dfsg-5ubuntu10.51+esm1

1:2.5+dfsg-5ubuntu10.51+esm2

Ecosystem specific

{
    "ubuntu_priority": "low"
}

Ubuntu:18.04:LTS / qemu

Package

Name: qemu
Purl: pkg:deb/ubuntu/qemu@1:2.11+dfsg-1ubuntu7.40?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.11+dfsg-1ubuntu7.40

Affected versions

1:2.*

1:2.10+dfsg-0ubuntu3

1:2.10+dfsg-0ubuntu4

1:2.10+dfsg-0ubuntu5

1:2.11+dfsg-1ubuntu1

1:2.11+dfsg-1ubuntu2

1:2.11+dfsg-1ubuntu4

1:2.11+dfsg-1ubuntu5

1:2.11+dfsg-1ubuntu6

1:2.11+dfsg-1ubuntu7

1:2.11+dfsg-1ubuntu7.1

1:2.11+dfsg-1ubuntu7.2

1:2.11+dfsg-1ubuntu7.3

1:2.11+dfsg-1ubuntu7.4

1:2.11+dfsg-1ubuntu7.5

1:2.11+dfsg-1ubuntu7.6

1:2.11+dfsg-1ubuntu7.7

1:2.11+dfsg-1ubuntu7.8

1:2.11+dfsg-1ubuntu7.9

1:2.11+dfsg-1ubuntu7.10

1:2.11+dfsg-1ubuntu7.12

1:2.11+dfsg-1ubuntu7.13

1:2.11+dfsg-1ubuntu7.14

1:2.11+dfsg-1ubuntu7.15

1:2.11+dfsg-1ubuntu7.17

1:2.11+dfsg-1ubuntu7.18

1:2.11+dfsg-1ubuntu7.19

1:2.11+dfsg-1ubuntu7.20

1:2.11+dfsg-1ubuntu7.21

1:2.11+dfsg-1ubuntu7.22

1:2.11+dfsg-1ubuntu7.23

1:2.11+dfsg-1ubuntu7.25

1:2.11+dfsg-1ubuntu7.26

1:2.11+dfsg-1ubuntu7.27

1:2.11+dfsg-1ubuntu7.28

1:2.11+dfsg-1ubuntu7.29

1:2.11+dfsg-1ubuntu7.31

1:2.11+dfsg-1ubuntu7.32

1:2.11+dfsg-1ubuntu7.33

1:2.11+dfsg-1ubuntu7.34

1:2.11+dfsg-1ubuntu7.35

1:2.11+dfsg-1ubuntu7.36

1:2.11+dfsg-1ubuntu7.37

1:2.11+dfsg-1ubuntu7.38

1:2.11+dfsg-1ubuntu7.39

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "qemu-system-misc": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-guest-agent-dbgsym": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-block-extra-dbgsym": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-utils-dbgsym": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-user": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-system-arm-dbgsym": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-kvm": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-system-ppc-dbgsym": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-user-static": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-system-arm": "1:2.11+dfsg-1ubuntu7.40",
            "qemu": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-system-sparc": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-system-s390x-dbgsym": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-system-common-dbgsym": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-system-x86-dbgsym": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-system": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-guest-agent": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-utils": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-block-extra": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-system-misc-dbgsym": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-system-sparc-dbgsym": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-system-mips-dbgsym": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-system-x86": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-system-ppc": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-system-s390x": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-system-common": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-user-static-dbgsym": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-system-mips": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-user-dbgsym": "1:2.11+dfsg-1ubuntu7.40",
            "qemu-user-binfmt": "1:2.11+dfsg-1ubuntu7.40"
        }
    ]
}

Ubuntu:20.04:LTS / qemu

Package

Name: qemu
Purl: pkg:deb/ubuntu/qemu@1:4.2-3ubuntu6.23?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:4.2-3ubuntu6.23

Affected versions

1:4.*

1:4.0+dfsg-0ubuntu9

1:4.0+dfsg-0ubuntu10

1:4.2-1ubuntu1

1:4.2-1ubuntu2

1:4.2-3ubuntu1

1:4.2-3ubuntu2

1:4.2-3ubuntu3

1:4.2-3ubuntu4

1:4.2-3ubuntu5

1:4.2-3ubuntu6

1:4.2-3ubuntu6.1

1:4.2-3ubuntu6.2

1:4.2-3ubuntu6.3

1:4.2-3ubuntu6.4

1:4.2-3ubuntu6.5

1:4.2-3ubuntu6.6

1:4.2-3ubuntu6.7

1:4.2-3ubuntu6.8

1:4.2-3ubuntu6.9

1:4.2-3ubuntu6.10

1:4.2-3ubuntu6.11

1:4.2-3ubuntu6.12

1:4.2-3ubuntu6.14

1:4.2-3ubuntu6.15

1:4.2-3ubuntu6.16

1:4.2-3ubuntu6.17

1:4.2-3ubuntu6.18

1:4.2-3ubuntu6.19

1:4.2-3ubuntu6.21

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "qemu-system-misc": "1:4.2-3ubuntu6.23",
            "qemu-guest-agent-dbgsym": "1:4.2-3ubuntu6.23",
            "qemu-block-extra-dbgsym": "1:4.2-3ubuntu6.23",
            "qemu-utils-dbgsym": "1:4.2-3ubuntu6.23",
            "qemu-user": "1:4.2-3ubuntu6.23",
            "qemu-system-x86-microvm": "1:4.2-3ubuntu6.23",
            "qemu-kvm": "1:4.2-3ubuntu6.23",
            "qemu-system-arm-dbgsym": "1:4.2-3ubuntu6.23",
            "qemu-system-ppc-dbgsym": "1:4.2-3ubuntu6.23",
            "qemu-user-static": "1:4.2-3ubuntu6.23",
            "qemu-system-arm": "1:4.2-3ubuntu6.23",
            "qemu": "1:4.2-3ubuntu6.23",
            "qemu-system-x86-xen": "1:4.2-3ubuntu6.23",
            "qemu-system-sparc": "1:4.2-3ubuntu6.23",
            "qemu-system-data": "1:4.2-3ubuntu6.23",
            "qemu-system-common-dbgsym": "1:4.2-3ubuntu6.23",
            "qemu-system-s390x-dbgsym": "1:4.2-3ubuntu6.23",
            "qemu-system-x86-dbgsym": "1:4.2-3ubuntu6.23",
            "qemu-system": "1:4.2-3ubuntu6.23",
            "qemu-guest-agent": "1:4.2-3ubuntu6.23",
            "qemu-utils": "1:4.2-3ubuntu6.23",
            "qemu-system-x86-xen-dbgsym": "1:4.2-3ubuntu6.23",
            "qemu-block-extra": "1:4.2-3ubuntu6.23",
            "qemu-system-misc-dbgsym": "1:4.2-3ubuntu6.23",
            "qemu-system-sparc-dbgsym": "1:4.2-3ubuntu6.23",
            "qemu-system-mips-dbgsym": "1:4.2-3ubuntu6.23",
            "qemu-system-x86": "1:4.2-3ubuntu6.23",
            "qemu-system-ppc": "1:4.2-3ubuntu6.23",
            "qemu-system-s390x": "1:4.2-3ubuntu6.23",
            "qemu-system-x86-microvm-dbgsym": "1:4.2-3ubuntu6.23",
            "qemu-system-common": "1:4.2-3ubuntu6.23",
            "qemu-system-gui-dbgsym": "1:4.2-3ubuntu6.23",
            "qemu-user-static-dbgsym": "1:4.2-3ubuntu6.23",
            "qemu-system-mips": "1:4.2-3ubuntu6.23",
            "qemu-system-gui": "1:4.2-3ubuntu6.23",
            "qemu-user-binfmt": "1:4.2-3ubuntu6.23",
            "qemu-user-dbgsym": "1:4.2-3ubuntu6.23"
        }
    ]
}

Ubuntu:22.04:LTS / qemu

Package

Name: qemu
Purl: pkg:deb/ubuntu/qemu@1:6.2+dfsg-2ubuntu6.2?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:6.2+dfsg-2ubuntu6.2

Affected versions

1:6.*

1:6.0+dfsg-2expubuntu1

1:6.0+dfsg-2expubuntu2

1:6.0+dfsg-2expubuntu4

1:6.2+dfsg-2ubuntu5

1:6.2+dfsg-2ubuntu6

1:6.2+dfsg-2ubuntu6.1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "qemu-system-misc": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-guest-agent-dbgsym": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-block-extra-dbgsym": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-utils-dbgsym": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-user": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-x86-microvm": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-arm-dbgsym": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-ppc-dbgsym": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-user-static": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-arm": "1:6.2+dfsg-2ubuntu6.2",
            "qemu": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-x86-xen": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-sparc": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-data": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-common-dbgsym": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-s390x-dbgsym": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-x86-dbgsym": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-guest-agent": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-utils": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-x86-xen-dbgsym": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-block-extra": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-sparc-dbgsym": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-misc-dbgsym": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-mips-dbgsym": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-x86": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-ppc": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-s390x": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-common": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-gui-dbgsym": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-user-static-dbgsym": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-mips": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-system-gui": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-user-binfmt": "1:6.2+dfsg-2ubuntu6.2",
            "qemu-user-dbgsym": "1:6.2+dfsg-2ubuntu6.2"
        }
    ]
}