Log in Start free

Vulnerability · Published Aug 4, 2023 · Assigned by redhat

CVE-2023-4135Out-of-bounds read information disclosure vulnerability

Medium 6.0

In plain English

A medium-severity out-of-bounds read in Extra Packages for Enterprise Linux from Fedora. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.0Medium
Exploit odds (30 days)0.4%top 68.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can be disclosed.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:13qemu1:8.0.4+dfsg-2DEBIAN-CVE-2023-4135
Debian:14qemu1:8.0.4+dfsg-2DEBIAN-CVE-2023-4135

Affected products (as reported)

VendorProductVersions
n/a qemu-kvm see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 Advanced Virtualization see references
Red Hat Red Hat Enterprise Linux 9 see references
Fedora Fedora see references
Fedora Extra Packages for Enterprise Linux see references

Weakness: CWE-125 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References