Skip to main content

Off-by-one Error

CVE-2021-3930

Medium
6.5/10

Summary

An off-by-one error was found in the SCSI device emulation in QEMU 1.0-rc0 before 6.1.1. It could occur while processing MODE SELECT commands in mode_sense_page() if the 'page' argument was set to MODE_PAGE_ALLS (0x3f). A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service condition.

  • LOW
  • LOCAL
  • NONE
  • CHANGED
  • NONE
  • LOW
  • NONE
  • HIGH

CWE-193 - Off-by-one Error

A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

References

Advisory Timeline

  • Published