CVE-2021-3559 Denial of service in libvirt

Medium 6.5 Published 24 May 2021 Updated 3 Aug 2024

An unprivileged client can crash the libvirt daemon via a specific command on hosts with mediated PCI devices, impacting system availability.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-3559?

CVE-2021-3559 is a medium-severity denial of service vulnerability in Netapp Ontap Select Deploy Administration Utility, published on 24 May 2021. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0. It only affects hosts with a PCI device and driver that supports mediated devices (e.g., GRID driver). This flaw could be used by an unprivileged client with a read-only connection to crash the libvirt daemon by executing the 'nodedev-list' virsh command. The highest threat from this vulnerability is to system availability.

Weakness: CWE-119

Which versions are affected by CVE-2021-3559?

It affects 2 products.

Products include Netapp Ontap Select Deploy Administration Utility, Redhat Libvirt.

How do I fix CVE-2021-3559?

No fix has been published for CVE-2021-3559 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2021-3559 being exploited?

There is no known exploitation of CVE-2021-3559 in the wild and no public exploit code.

All Netapp Ontap Select Deploy Administration Utility vulnerabilities

Sources

Also known as GHSA-4236-36gg-25m7.