CVE:CVE-2021-3700
CNNVD:CNNVD-202202-1922
usbredirparser是检查标头长度反序列化数据。
usbredirparser存在资源管理错误漏洞，该漏洞源于在0.11.0之前版本的usbredirparser中，在usbredirparser usbredirparser.c中的usbredirparser serialize()中发现了一个使用后的漏洞。当序列化大量缓冲的写数据时，如果目标很慢或阻塞，就会出现这个问题。
solution:Upgrade spice-space usbredir to a higher version than 0.11.0,and avoid the version (,0.11.0); Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,8.0,and avoid the version 6.0,7.0,8.0; Upgrade fedoraproject fedora to a higher version than 34,and avoid the version 34; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0