CVE-2023-3019

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-3019
A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.0 / Impact : 4.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://access.redhat.com/errata/RHSA-2024:0135 Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0404 Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0569 Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:2135
https://access.redhat.com/security/cve/CVE-2023-3019 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2222351 Issue Tracking Patch Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
History

13 Sep 2024, 19:15

Type Values Removed Values Added
References
  • {'url': 'https://security.netapp.com/advisory/ntap-20230831-0005/', 'tags': ['Third Party Advisory'], 'source': 'secalert@redhat.com'}

30 Apr 2024, 14:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:2135 -

07 Mar 2024, 19:57

Type Values Removed Values Added
CPE cpe:2.3:a:qemu:qemu:-:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
References () https://access.redhat.com/errata/RHSA-2024:0135 - () https://access.redhat.com/errata/RHSA-2024:0135 - Third Party Advisory
References () https://access.redhat.com/errata/RHSA-2024:0404 - () https://access.redhat.com/errata/RHSA-2024:0404 - Third Party Advisory
References () https://access.redhat.com/errata/RHSA-2024:0569 - () https://access.redhat.com/errata/RHSA-2024:0569 - Third Party Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=2222351 - Issue Tracking, Third Party Advisory () https://bugzilla.redhat.com/show_bug.cgi?id=2222351 - Issue Tracking, Patch, Third Party Advisory
References () https://security.netapp.com/advisory/ntap-20230831-0005/ - () https://security.netapp.com/advisory/ntap-20230831-0005/ - Third Party Advisory

30 Jan 2024, 17:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:0569 -

25 Jan 2024, 20:15

Type Values Removed Values Added
References
  • (MISC) https://security.netapp.com/advisory/ntap-20230831-0005/ -
  • () https://access.redhat.com/errata/RHSA-2024:0404 -
  • () https://access.redhat.com/errata/RHSA-2024:0135 -

02 Aug 2023, 01:00

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
CWE CWE-416
CPE cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*
cpe:2.3:a:qemu:qemu:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*
References (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2222351 - (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2222351 - Issue Tracking, Third Party Advisory
References (MISC) https://access.redhat.com/security/cve/CVE-2023-3019 - (MISC) https://access.redhat.com/security/cve/CVE-2023-3019 - Third Party Advisory

24 Jul 2023, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-07-24 16:15

Updated : 2024-09-13 19:15

NVD link : CVE-2023-3019

Mitre link : CVE-2023-3019

CVE.ORG link : CVE-2023-3019

JSON object : View

Products Affected

qemu

  • qemu

redhat

  • enterprise_linux
CWE
CWE-416

Use After Free