CVE-2021-3559

6.5 mediumEPSS 1.0%

Medium (6.5). EPSS 1.0% chance of exploitation in the next 30 days.

A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0. It only affects hosts with a PCI device and driver that supports mediated devices (e.g., GRID driver). This flaw could be used by an unprivileged client with a read-only connection to crash the libvirt daemon by executing the 'nodedev-list' virsh command. The highest threat from this vulnerability is to system availability.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2021-05-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

netapp:ontap_select_deploy_administration_utility
redhat:libvirt

References

https://bugzilla.redhat.com/show_bug.cgi?id=1962306
https://security.netapp.com/advisory/ntap-20210706-0006/
https://bugzilla.redhat.com/show_bug.cgi?id=1962306
https://security.netapp.com/advisory/ntap-20210706-0006/

Check your stack JSON