← CVE Intelligence

CVE-2023-3019

Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest() PUBLISHED

Description (CNA)

A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 8unaffected 8090020231206155326.a75119d5 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 8090020231206155326.a75119d5 before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Supportunaffected 8060020231128234847.ad008a3a before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Supportunaffected 8060020231128234847.ad008a3a before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 8080020240116113044.63b34585 before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 8080020240116113044.63b34585 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 17:8.2.0-11.el9_4 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Enterprise Linux 8 Advanced Virtualizationaffected

CWE

CWE-416

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.

siemens-SADP

No English description supplied.