CVE-2021-3700
Medium
Description
A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination.
SeverityMedium
CVSS6.4
Exploit probability—
Product
Spice-space Usbredir
PublishedFeb 24, 2022
First seenFeb 24, 2022
Weakness typeCWE-416Use after free
How to fix
Update
- spice-space usbredir0.11.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| spice-space usbredir | v < 0.11.0 | 0.11.0 |
| redhat enterprise_linux | 6.0, 7.0, 8.0 | — |
| fedoraproject fedora | 34 | — |
| debian debian_linux | 9.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.