CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

CVE details

CVE-2021-3507

A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario, or potential information leakage from the host memory.

Score
6.1 medium
Published
2021-05-06
Links
NVD · cve.org

Affected ports (2)

PortPackageVersionStatusMaintainer
emulators/qemu-cheriqemu-cheri0.d20260108unaddressedbrooks@FreeBSD.org
emulators/qemu-user-staticqemu-user-static3.1.0_16unaddressedemulation@FreeBSD.org

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>qemu-cheri</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>qemu-user-static</name>
	<range><lt>FIXME</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>A heap buffer overflow was found in the floppy disk emulator of QEMU
	up to 6.0.0 (including). It could occur in fdctrl_transfer_handler()
	in hw/block/fdc.c while processing DMA read data transfers from the
	floppy drive to the guest system. A privileged guest user could use
	this flaw to crash the QEMU process on the host resulting in DoS
	scenario, or potential information leakage from the host memory.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2021-3507</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2021-3507</url>
    </references>
    <dates>
      <discovery>2021-05-06</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>