CVE-2021-3582

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMA_CMD_CREATE_MR" command due to improper memory remapping (mremap). This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this vulnerability is to system availability.

• CWE-119
• CWE-119

• https://bugzilla.redhat.com/show_bug.cgi?id=1966266Exploit, Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/09/msg00008.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202208-27Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220429-0003/Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1966266Exploit, Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/09/msg00008.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202208-27Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220429-0003/Third Party Advisory

Published

Mar 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3576Execution with Unnecessary Privileges vulnerability in Bitde…7.8
• CVE-2021-3577An unauthenticated remote code execution vulnerability was r…8.8
• CVE-2021-3578A flaw was found in mbsync before v1.3.6 and v1.4.2, where a…7.8
• CVE-2021-3579Incorrect Default Permissions vulnerability in the bdservice…7.8
• CVE-2021-3580A flaw was found in the way nettle's RSA decryption function…7.5
• CVE-2021-3581Buffer Access with Incorrect Length Value in zephyr. Zephyr …8.8
• CVE-2021-3583A flaw was found in Ansible, where a user's controller is vu…7.1
• CVE-2021-3584A server side remote code execution vulnerability was found …7.2
• CVE-2021-3585A flaw was found in openstack-tripleo-heat-templates. Plain …5.5
• CVE-2021-3586A flaw was found in servicemesh-operator. The NetworkPolicy …9.8
• CVE-2021-3587Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-3588The cli_feat_read_cb() function in src/gatt-database.c does …3.3