Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-0330

Published: 06/03/2023 Updated: 19/04/2024
CVSS v3 Base Score: 6 | Impact Score: 4 | Exploitability Score: 1.5
VMScore: 0
Subscribe to Qemu

Vulnerability Summary

A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption bugs like stack overflow or use-after-free.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

qemu qemu 8.0.0

qemu qemu

debian debian linux 10.0

Vendor Advisories

Debian CVElist Bug Report Logs: qemu: CVE-2023-0330
Debian Bug report logs - #1029155 qemu: CVE-2023-0330 Package: src:qemu; Maintainer for src:qemu is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Wed, 18 Jan 2023 16:36:01 UTC Severity: important Tags: security, upstream Forwarded to list ...
Amazon Linux 2: ALAS2-2023-2191
There is a vulnerability in the lsi53c895a device which affects the latest version of qemu The carefully designed PoC can repeatedly trigger DMA writes but does not limit the addresses written to the DMA, resulting in reentrancy issues and eventually overflow (CVE-2023-0330) ...
Amazon Linux 2: ALAS2-2023-2148
A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 520 The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS scenario (CVE- ...
Red Hat:
Description<!----> This CVE is under investigation by Red Hat Product Security ...

ICS Advisories

https://ics-cert.us-cert.gov/advisories/0600b443ff4393d097c485fbc8d3ed3b
Critical Infrastructure Sectors: Critical Manufacturing

References

CWE-787https://lists.nongnu.org/archive/html/qemu-devel/2023-01/msg03411.htmlhttps://lists.debian.org/debian-lts-announce/2023/10/msg00006.htmlhttps://access.redhat.com/security/cve/CVE-2023-0330https://bugzilla.redhat.com/show_bug.cgi?id=2160151https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1029155https://nvd.nist.govhttps://www.cisa.gov/news-events/ics-advisories/icsa-24-046-11https://alas.aws.amazon.com/AL2/ALAS-2023-2191.html
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook