Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-0330

A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption bugs like stack overflow or use-after-free.

Published

2023-03-06T23:15:11.457

Last Modified

2024-11-21T07:36:59.077

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses

Type: Secondary
CWE-121
Type: Primary
CWE-787

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	qemu	qemu	< 7.2.3	Yes
Application	qemu	qemu	8.0.0	Yes
Application	qemu	qemu	8.0.0	Yes
Application	qemu	qemu	8.0.0	Yes
Application	qemu	qemu	8.0.0	Yes
Application	qemu	qemu	8.0.0	Yes
Application	qemu	qemu	8.0.0	Yes
Operating System	debian	debian_linux	10.0	Yes

References

https://access.redhat.com/security/cve/CVE-2023-0330 ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=2160151 ([email protected])
https://lists.debian.org/debian-lts-announce/2023/10/msg00006.html Mailing List, Third Party Advisory ([email protected])
https://lists.nongnu.org/archive/html/qemu-devel/2023-01/msg03411.html Mailing List, Patch ([email protected])
https://access.redhat.com/security/cve/CVE-2023-0330 (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=2160151 (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2023/10/msg00006.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.nongnu.org/archive/html/qemu-devel/2023-01/msg03411.html Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)