CVE-2023-4135

Name
CVE-2023-4135
Description
A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can be disclosed.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://access.redhat.com/security/cve/CVE-2023-4135
MISC https://bugzilla.redhat.com/show_bug.cgi?id=2229101
MISC https://www.zerodayinitiative.com/advisories/ZDI-CAN-21521
Third Party Advisory https://security.netapp.com/advisory/ntap-20230915-0012/

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:* qemu >= None < 2023-08-03
cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:* qemu >= None < 8.1.0
cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:* qemu >= 8.0.0 < 8.1.0

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
qemu 3.18-community 8.0.5-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
qemu 3.19-community 8.1.5-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
qemu 3.20-community 9.0.2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
qemu edge-community 9.1.2-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable