CVE ID:	CVE-2021-3409
Description:	The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this.
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2021.2125   1.3.6.1.4.1.25623.1.1.2.2021.2046
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2021-3409 GLSA-202208-27 https://security.gentoo.org/glsa/202208-27 [debian-lts-announce] 20210410 [SECURITY] [DLA 2623-1] qemu security update https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html https://bugzilla.redhat.com/show_bug.cgi?id=1928146 https://bugzilla.redhat.com/show_bug.cgi?id=1928146 https://security.netapp.com/advisory/ntap-20210507-0001/ https://security.netapp.com/advisory/ntap-20210507-0001/ https://www.openwall.com/lists/oss-security/2021/03/09/1 https://www.openwall.com/lists/oss-security/2021/03/09/1