1 matches found
AZL-31817 CVE-2023-3180 affecting package qemu for versions less than 6.2.0-23
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtiocryptohandlesymreq. There is no check for the value of srclen and dstlen in virtiocryptosymophelper, potentially leading to a heap buffer overflow when the two values differ...
6.5CVSS6.9AI score0.00233EPSS
SaveExploits0References1
20