CVE-2021-3416

A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS scenario.

• CWE-835
• CWE-835

• https://bugzilla.redhat.com/show_bug.cgi?id=1932827Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/04/msg00009.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/09/msg00008.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202208-27Third Party Advisory
• https://security.netapp.com/advisory/ntap-20210507-0002/Third Party Advisory
• https://www.openwall.com/lists/oss-security/2021/02/26/1Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1932827Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/04/msg00009.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/09/msg00008.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202208-27Third Party Advisory
• https://security.netapp.com/advisory/ntap-20210507-0002/Third Party Advisory
• https://www.openwall.com/lists/oss-security/2021/02/26/1Mailing List, Patch, Third Party Advisory

Published

Mar 18, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34145The Bluetooth Classic implementation in the Cypress WICED BT…5.3
• CVE-2021-34146The Bluetooth Classic implementation in the Cypress CYW92073…6.5
• CVE-2021-34147The Bluetooth Classic implementation in the Cypress WICED BT…6.5
• CVE-2021-34148The Bluetooth Classic implementation in the Cypress WICED BT…6.5
• CVE-2021-34149The Bluetooth Classic implementation on the Texas Instrument…6.5
• CVE-2021-34150The Bluetooth Classic implementation on Bluetrum AB5301A dev…6.5
• CVE-2021-34164Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authen…8.8
• CVE-2021-34165A SQL Injection vulnerability in Sourcecodester Basic Shoppi…9.8
• CVE-2021-34166A SQL INJECTION vulnerability in Sourcecodester Simple Food …9.8
• CVE-2021-34167Cross Site Request Forgery (CSRF) vulnerability in taoCMS 3.…8.8
• CVE-2021-3417An internal product security audit of LXCO, prior to version…4.9
• CVE-2021-34170Bandai Namco FromSoftware Dark Souls III allows remote attac…9.8