CVE-2021-3559 | BDVDB-2026-154166 Detail

libvirt

Description#

A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0. It only affects hosts with a PCI device and driver that supports mediated devices (e.g., GRID driver). This flaw could be used by an unprivileged client with a read-only connection to crash the libvirt daemon by executing the 'nodedev-list' virsh command. The highest threat from this vulnerability is to system availability.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References#

https://bugzilla.redhat.com/show_bug.cgi?id=1962306
https://security.netapp.com/advisory/ntap-20210706-0006/

Exploit#

No public exploit known

History#

Version 12021-05-24Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.