CVE-2023-4135

A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can be disclosed.

References

Affected packages

Git / github.com/qemu/qemu

Affected ranges

Type

GIT

Repo

https://github.com/qemu/qemu

Events

Introduced

c1eb2ddf0f8075faddc5f7c3d39feae3e8e9d6b4

Fixed

7e5a8bb22368b3555644cb2debd3df24592f3a21

Introduced

Last affected

2c27fdc7a626408ee2cf30d791aa0b63027c7404

Introduced

Last affected

6cb2011fedf8c4e7b66b4a3abd6b42c1bae99ce6

Introduced

Last affected

9ba37026fcf6b7f3f096c0cca3e1e7307802486b

Database specific

{
    "versions": [
        {
            "introduced": "8.0.0"
        },
        {
            "fixed": "8.1.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.0-rc0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.0-rc2"
        }
    ]
}

Affected versions

v8.*

v8.0.0

v8.1.0-rc0

v8.1.0-rc1

v8.1.0-rc2

v8.1.0-rc3

v8.1.0-rc4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-4135.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "38"
            }
        ]
    }
]