CVE-2021-3507

Name of the Vulnerable Software and Affected Versions QEMU versions up to 6.0.0

Description A heap buffer overflow was found in the floppy disk emulator of QEMU. It could occur in fdctrl transfer handler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host, resulting in a denial-of-service scenario, or potential information leakage from the host memory.

Recommendations For QEMU versions up to 6.0.0, as a temporary workaround, consider disabling the fdctrl transfer handler() function until a patch is available. Restrict access to the hw/block/fdc.c component to minimize the risk of exploitation. Avoid using the floppy disk emulator until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.