OSV-2021-710

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qemu/OSV-2021-710.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-710
Published
2021-05-01T00:00:22.994253Z
Modified
2022-07-09T00:39:34.474998Z
Summary
Heap-use-after-free in iov_from_buf_full
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33785

Crash type: Heap-use-after-free WRITE 2
Crash state:
iov_from_buf_full
iov_from_buf
virtio_net_receive_rcu
References

Affected packages

OSS-Fuzz / qemu

Package

Name
qemu
Purl
pkg:generic/qemu

Affected ranges

Type
GIT
Repo
https://git.qemu.org/git/qemu.git
Events
Introduced
b12498fc575f2ad30f09fe78badc7fef526e2d76
Fixed
8664d30a30fd676b56b4c29dbcbdd5c5538acfc1

Affected versions

v6.*

v6.0.0
v6.0.0-rc0
v6.0.0-rc1
v6.0.0-rc2
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.1.0
v6.1.0-rc0
v6.1.0-rc1
v6.1.0-rc2
v6.1.0-rc3
v6.1.0-rc4
v6.1.1

Ecosystem specific

{
    "severity": "HIGH"
}