Lucene search
PRIOn knowledge basePRION:CVE-2023-3180HistoryAug 03, 2023 - 3:15 p.m.
Heap overflow
2023-08-0315:15:00
PRIOn knowledge base
www.prio-n.com
7
qemu
virtual crypto device
data encryption
data decryption
buffer overflow
heap overflow
virtio_crypto_handle_sym_req
virtio_crypto_sym_op_helper
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of src_len and dst_len in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 10.0 | |
| fedora | eq | 38 |
References
Related
nvd
nvd
CVE-2023-3180
2023-08-03 15:15:29
nessus
nessus
EulerOS Virtualization 2.9.0 : qemu (EulerOS-SA-2023-3111)
2024-01-16 00:00:00
EulerOS Virtualization 2.9.1 : qemu (EulerOS-SA-2023-3096)
2024-01-16 00:00:00
Amazon Linux 2 : qemu (ALAS-2023-2207)
2023-08-23 00:00:00
alpinelinux
alpinelinux
CVE-2023-3180
2023-08-03 15:15:29
cvelist
cvelist
CVE-2023-3180 Heap buffer overflow in virtio_crypto_sym_op_helper()
2023-08-03 14:31:36
cve
cve
CVE-2023-3180
2023-08-03 15:15:29
osv
osv
CVE-2023-3180
2023-08-03 15:15:29
qemu - security update
2023-10-05 00:00:00
qemu regression
2024-06-06 12:29:55
openvas
openvas
Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2023-3111)
2023-11-01 00:00:00
Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2023-3096)
2023-11-01 00:00:00
Huawei EulerOS: Security Advisory for qemu-micro (EulerOS-SA-2023-3193)
2023-11-10 00:00:00
veracode
veracode
Out-of-bounds Write
2023-08-13 13:35:26
cbl_mariner
cbl_mariner
CVE-2023-3180 affecting package qemu for versions less than 8.2.0-1
2024-03-19 17:21:46
debiancve
debiancve
CVE-2023-3180
2023-08-03 15:15:29
ubuntucve
ubuntucve
CVE-2023-3180
2023-08-03 00:00:00
redhatcve
redhatcve
CVE-2023-3180
2023-08-03 07:48:53
amazon
amazon
Medium: qemu
2023-08-17 11:58:00
oraclelinux
oraclelinux
virt:kvm_utils1 security update
2024-02-12 00:00:00
qemu security update
2023-09-22 00:00:00
qemu security update
2023-09-22 00:00:00
debian
debian
[SECURITY] [DLA 3604-1] qemu security update
2023-10-05 16:13:52
fedora
fedora
[SECURITY] Fedora 38 Update: qemu-7.2.5-1.fc38
2023-08-29 01:35:27
redos
redos
ROS-20240329-15
2024-03-29 00:00:00
ubuntu
ubuntu
QEMU regression
2024-06-06 00:00:00
QEMU vulnerabilities
2024-01-08 00:00:00