Vulnerability · Published Jul 24, 2023 · Assigned by redhat
CVE-2023-3019Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()
Medium 6.0
In plain English
A medium-severity use-after-free in Red Hat Enterprise Linux 6 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)6.0Medium
Exploit odds (30 days)0.3%top 75.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | qemu-guest-agent | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-img | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-kvm | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-kvm-audio-pa | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-kvm-block-blkio | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-kvm-block-curl | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-kvm-block-rbd | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-kvm-common | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-kvm-core | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu-ccw | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu-pci | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-vga | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-kvm-device-usb-host | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-kvm-device-usb-redirect | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-kvm-docs | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-kvm-tools | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-kvm-ui-egl-headless | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-kvm-ui-opengl | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| AlmaLinux:9 | qemu-pr-helper | 17:8.2.0-11.el9_4 | ALSA-2024:2135 |
| Debian:12 | qemu | 1:7.2+dfsg-7+deb12u4 | DEBIAN-CVE-2023-3019 |
| Debian:13 | qemu | 1:8.2.0+ds-1 | DEBIAN-CVE-2023-3019 |
| Debian:14 | qemu | 1:8.2.0+ds-1 | DEBIAN-CVE-2023-3019 |
| Rocky Linux:8 | hivex | 0:1.3.18-23.module+el8.10.0+1590+a67ab969 | RLSA-2024:0135 |
| Rocky Linux:8 | hivex | 0:1.3.18-23.module+el8.10.0+1835+43f01cbb | RLSA-2024:0135 |
| Rocky Linux:8 | libguestfs | 1:1.44.0-9.module+el8.10.0+1590+a67ab969.rocky | RLSA-2024:0135 |
| Rocky Linux:8 | libguestfs | 1:1.44.0-9.module+el8.10.0+1835+43f01cbb.rocky.rocky | RLSA-2024:0135 |
| Rocky Linux:8 | libiscsi | 0:1.18.0-8.module+el8.10.0+1835+43f01cbb | RLSA-2024:0135 |
| Rocky Linux:8 | libiscsi | 0:1.18.0-8.module+el8.10.0+1590+a67ab969 | RLSA-2024:0135 |
| Rocky Linux:8 | libnbd | 0:1.6.0-5.module+el8.10.0+1835+43f01cbb | RLSA-2024:0135 |
| Rocky Linux:8 | libnbd | 0:1.6.0-5.module+el8.10.0+1590+a67ab969 | RLSA-2024:0135 |
| Rocky Linux:8 | libtpms | 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.10.0+1590+a67ab969 | RLSA-2024:0135 |
| Rocky Linux:8 | libtpms | 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.10.0+1835+43f01cbb | RLSA-2024:0135 |
| Rocky Linux:8 | libvirt-dbus | 0:1.3.0-2.module+el8.10.0+1590+a67ab969 | RLSA-2024:0135 |
| Rocky Linux:8 | libvirt-dbus | 0:1.3.0-2.module+el8.10.0+1835+43f01cbb | RLSA-2024:0135 |
| Rocky Linux:8 | libvirt-python | 0:8.0.0-2.module+el8.10.0+1590+a67ab969 | RLSA-2024:0135 |
| Rocky Linux:8 | libvirt-python | 0:8.0.0-2.module+el8.10.0+1835+43f01cbb | RLSA-2024:0135 |
| Rocky Linux:8 | nbdkit | 0:1.24.0-5.module+el8.10.0+1590+a67ab969 | RLSA-2024:0135 |
| Rocky Linux:8 | nbdkit | 0:1.24.0-5.module+el8.10.0+1835+43f01cbb | RLSA-2024:0135 |
| Rocky Linux:8 | netcf | 0:0.2.8-12.module+el8.10.0+1835+43f01cbb | RLSA-2024:0135 |
| Rocky Linux:8 | netcf | 0:0.2.8-12.module+el8.10.0+1590+a67ab969 | RLSA-2024:0135 |
| Rocky Linux:8 | perl-Sys-Virt | 0:8.0.0-1.module+el8.10.0+1835+43f01cbb | RLSA-2024:0135 |
| Rocky Linux:8 | perl-Sys-Virt | 0:8.0.0-1.module+el8.10.0+1590+a67ab969 | RLSA-2024:0135 |
| Rocky Linux:9 | qemu-kvm | 7:8.2.0-11.el9_4 | RLSA-2024:2135 |
| Rocky Linux:8 | seabios | 0:1.16.0-4.module+el8.9.0+1408+7b966129 | RLSA-2024:0135 |
| Rocky Linux:8 | sgabios | 1:0.20170427git-3.module+el8.10.0+1590+a67ab969 | RLSA-2024:0135 |
| Rocky Linux:8 | sgabios | 1:0.20170427git-3.module+el8.10.0+1835+43f01cbb | RLSA-2024:0135 |
| Rocky Linux:8 | supermin | 0:5.2.1-2.module+el8.10.0+1835+43f01cbb | RLSA-2024:0135 |
| Rocky Linux:8 | supermin | 0:5.2.1-2.module+el8.10.0+1590+a67ab969 | RLSA-2024:0135 |
| Rocky Linux:8 | swtpm | 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+1835+43f01cbb | RLSA-2024:0135 |
| Rocky Linux:8 | swtpm | 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+1590+a67ab969 | RLSA-2024:0135 |
| Rocky Linux:8 | virt-v2v | 1:1.42.0-22.module+el8.10.0+1835+43f01cbb | RLSA-2024:0135 |
| Rocky Linux:8 | virt-v2v | 1:1.42.0-22.module+el8.10.0+1590+a67ab969 | RLSA-2024:0135 |
| Ubuntu:22.04:LTS | qemu | 1:6.2+dfsg-2ubuntu6.24 | USN-7094-1 |
| Ubuntu:22.04:LTS | qemu | 1:6.2+dfsg-2ubuntu6.24 | UBUNTU-CVE-2023-3019 |
| Ubuntu:24.04:LTS | qemu | 1:8.2.2+ds-0ubuntu1.4 | USN-7094-1 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | see references |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | see references |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | see references |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 Advanced Virtualization | see references |
Weakness: CWE-416 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
References
- RHSA-2024:0135 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:0404 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:0569 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2135 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2023-3019 vdb-entry, x_refsource_REDHAT
- RHBZ#2222351 issue-tracking, x_refsource_REDHAT
- https://security.netapp.com/advisory/ntap-20230831-0005/ x_transferred
- https://lists.debian.org/debian-lts-announce/2025/04/msg00042.html
- https://cert-portal.siemens.com/productcert/html/ssa-577017.html