Lucene search

K
redhatcveRedhat.comRH:CVE-2023-3180
HistoryAug 03, 2023 - 7:48 a.m.

CVE-2023-3180

2023-08-0307:48:53
redhat.com
access.redhat.com
22
qemu
crypto device
heap buffer overflow
data encryption
virtio_crypto_handle_sym_req
virtio_crypto_sym_op_helper

0.0004 Low

EPSS

Percentile

5.2%

A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of src_len and dst_len in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.