CVE-2023-4135
Out-of-bounds read information disclosure vulnerability
概要
Out-of-bounds read information disclosure vulnerability
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can be disclosed.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2023-4135 qemu 修正版: 1:8.0.4+dfsg-2
参照URL
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- advisory zerodayinitiative.com
- report bugzilla.redhat.com
- web access.redhat.com
- web packages.fedoraproject.org