[Git][security-tracker-team/security-tracker][master] Add CVE-2021-3750/qemu

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
aef46f50 by Salvatore Bonaccorso at 2021-09-02T07:57:03+02:00
Add CVE-2021-3750/qemu

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -155,8 +155,12 @@ CVE-2021-40321
 	RESERVED
 CVE-2021-40320
 	RESERVED
-CVE-2021-3750
+CVE-2021-3750 [hcd-ehci: DMA reentrancy issue leads to use-after-free]
 	RESERVED
+	- qemu <unfixed>
+	NOTE: https://gitlab.com/qemu-project/qemu/-/issues/541
+	NOTE: Fix for whole class of DMA MMIO reentrancy issues: https://gitlab.com/qemu-project/qemu/-/issues/556
+	NOTE: Patchset: https://lists.nongnu.org/archive/html/qemu-devel/2021-08/msg03692.html
 CVE-2021-3749 (axios is vulnerable to Inefficient Regular Expression Complexity ...)
 	- node-axios <unfixed>
 	NOTE: https://huntr.dev/bounties/1e8f07fc-c384-4ff9-8498-0690de2e8c31/



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aef46f50467d75d10665753800c98aacca653ecc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aef46f50467d75d10665753800c98aacca653ecc
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210902/c81e5f19/attachment.htm>