Lucene search
Redhat.comRH:CVE-2023-3301HistoryAug 01, 2023 - 1:19 p.m.
CVE-2023-3301
2023-08-0113:19:43
redhat.com
access.redhat.com
19
qemu
hot-unplug
denial of service
race scenario
net device
virtio-net pci
CVSS3
5.6
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
EPSS
0
Percentile
5.1%
A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.
Related
openvas
openvas
Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2023-3371)
2023-12-14 00:00:00
Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2023-3389)
2023-12-14 00:00:00
openSUSE: Security Advisory for qemu (SUSE-SU-2023:3234-1)
2024-03-04 00:00:00
nessus
nessus
EulerOS Virtualization 2.11.0 : qemu (EulerOS-SA-2023-3389)
2024-01-16 00:00:00
QEMU < 8.1.0-rc2 DOS
2023-08-10 00:00:00
EulerOS Virtualization 2.11.1 : qemu (EulerOS-SA-2023-3371)
2024-01-16 00:00:00
osv
osv
CVE-2023-3301
2023-09-13 17:15:10
Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update
2023-11-14 00:00:00
qemu regression
2024-06-06 12:29:55
cve
cve
CVE-2023-3301
2023-09-13 17:15:10
cbl_mariner
cbl_mariner
CVE-2023-3301 affecting package qemu for versions less than 8.2.0-1
2024-03-19 17:21:46
veracode
veracode
Denial Of Service (DoS)
2023-08-05 03:34:22
debiancve
debiancve
CVE-2023-3301
2023-09-13 17:15:10
prion
prion
Sql injection
2023-09-13 17:15:00
ubuntucve
ubuntucve
CVE-2023-3301
2023-09-13 00:00:00
cvelist
cvelist
CVE-2023-3301 Triggerable assertion due to race condition in hot-unplug
2023-09-13 16:09:36
nvd
nvd
CVE-2023-3301
2023-09-13 17:15:10
almalinux
almalinux
oraclelinux
oraclelinux
virt:ol and virt-devel:rhel security, bug fix, and enhancement update
2023-11-18 00:00:00
virt:kvm_utils1 security update
2024-02-12 00:00:00
qemu security update
2023-09-22 00:00:00
redhat
redhat
redos
redos
ROS-20240606-01
2024-06-06 00:00:00
ubuntu
ubuntu
QEMU regression
2024-06-06 00:00:00
QEMU vulnerabilities
2024-01-08 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
CVSS3
5.6
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
EPSS
0
Percentile
5.1%
Related for RH:CVE-2023-3301