Vulnerability CVE-2021-3975

Vulnerability Name:

CVE-2021-3975 (CCN-234358)

Assigned:

2021-11-17

Published:

2021-11-17

Updated:

2023-02-03

Summary:

A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash.

CVSS v3 Severity:

6.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
5.7 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
4.6 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

5.3 Medium (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
4.6 Medium (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

CVSS v2 Severity:

4.9 Medium (CCN CVSS v2 Vector: AV:N/AC:H/Au:S/C:N/I:N/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): High Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

Vulnerability Type:

CWE-416

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2021-3975

Source: secalert@redhat.com
Type: Issue Tracking, Third Party Advisory
secalert@redhat.com

Source: CCN
Type: Red Hat Bugzilla - Bug 2024326
(CVE-2021-3975) - CVE-2021-3975 libvirt: segmentation fault during VM shutdown can lead to vdsm hang

Source: secalert@redhat.com
Type: Issue Tracking, Patch, Third Party Advisory
secalert@redhat.com

Source: XF
Type: UNKNOWN
libvirt-cve20213975-dos(234358)

Source: CCN
Type: libvirt GIT Repository
qemu: Add missing lock in qemuProcessHandleMonitorEOF

Source: secalert@redhat.com
Type: Patch, Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Patch, Third Party Advisory
secalert@redhat.com

Vulnerable Configuration:

Configuration RedHat 1:

cpe:/a:redhat:enterprise_linux:8:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/a:redhat:enterprise_linux:8::appstream:*:*:*:*:*

Configuration RedHat 3:

cpe:/a:redhat:enterprise_linux:8::crb:*:*:*:*:*

Configuration CCN 1:

cpe:/a:libvirt:libvirt:*:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:com.redhat.rhsa:def:20221759	P	RHSA-2022:1759: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update (Moderate)	2022-05-10
oval:org.opensuse.security:def:99497	P	(Moderate)	2022-03-09
oval:org.opensuse.security:def:119103	P	Security update for libvirt (Important)	2022-02-17
oval:org.opensuse.security:def:102901	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:109567	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:96233	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:9130	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:103029	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:109683	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:96211	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:102911	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:109577	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:96239	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:119302	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:9140	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:9888	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:96221	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:118807	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:102917	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:70028	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:109583	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:10435	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:96250	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:119485	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:42194	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:70575	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:102891	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:109557	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:9894	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:96227	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:118997	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:102923	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:70034	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:109589	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:96260	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:119670	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:96201	P	Security update for libvirt (Important)	2022-01-11
oval:org.opensuse.security:def:57578	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:86219	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:33116	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:59877	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:88593	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:51767	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:84294	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:125798	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:31375	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:58112	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:86753	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:33794	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:23779	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:89272	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:52039	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:84752	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:126961	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:31755	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:58939	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:87580	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:34054	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:24051	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:89532	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:57198	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:85839	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:127359	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:32289	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:59617	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:88276	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:34677	P	Security update for libvirt (Important)	2022-01-05
oval:org.opensuse.security:def:26224	P	Security update for libvirt (Important)	2022-01-05
oval:org.opensuse.security:def:10230	P	Security update for libvirt (Important)	2022-01-05
oval:org.opensuse.security:def:70370	P	Security update for libvirt (Important)	2022-01-05
oval:org.opensuse.security:def:6155	P	Security update for libvirt (Important)	2022-01-05
oval:org.opensuse.security:def:8729	P	Security update for libvirt (Important)	2022-01-05
oval:org.opensuse.security:def:60500	P	Security update for libvirt (Important)	2022-01-05
oval:org.opensuse.security:def:9480	P	Security update for libvirt (Important)	2022-01-05
oval:org.opensuse.security:def:69620	P	Security update for libvirt (Important)	2022-01-05
oval:org.opensuse.security:def:5338	P	Security update for libvirt (Important)	2022-01-05
oval:org.opensuse.security:def:70852	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:69688	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:98911	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:105601	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:92547	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:99696	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:106386	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:9747	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:91961	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:69887	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:99106	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:105796	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:10298	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:92746	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:70438	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:100004	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:106802	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:8800	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:92156	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:99298	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:105988	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:93423	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:8995	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:92348	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:106187	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:10712	P	Security update for libvirt (Important) (in QA)	2021-12-30
oval:org.opensuse.security:def:9548	P	Security update for libvirt (Important) (in QA)	2021-12-30

BACK