CVE-2021-3607 | BDVDB-2026-170652 Detail

Description#

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12022-02-24Record published in the CVE List.
2. Version 22024-08-03Most recent update recorded in the CVE List.