CVE-2023-3019
CVE-2023-3019 · Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.
CVSS 6.0 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
red hat enterprise linux 8
- Versions
- ≥ 8090020231206155326.a75119d5: Not affected (rpm)
No fix published
red hat enterprise linux 8.6 extended update support
- Versions
- ≥ 8060020231128234847.ad008a3a: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 extended update support
- Versions
- ≥ 8080020240116113044.63b34585: Not affected (rpm)
No fix published
red hat enterprise linux 9
- Versions
- ≥ 17:8.2.0-11.el9_4: Not affected (rpm)
No fix published
red hat enterprise linux 6
No fix published
red hat enterprise linux 7
No fix published
red hat enterprise linux 8 advanced virtualization
No fix published
qemu Debian:12
- Versions
- 1:7.2+dfsg-7
- 1:7.2+dfsg-7+deb12u1
- 1:7.2+dfsg-7+deb12u2
- 1:7.2+dfsg-7+deb12u2~bpo11+1
- 1:7.2+dfsg-7+deb12u3
- Affected ranges
- ECOSYSTEM: < 1:7.2+dfsg-7+deb12u4
Update to 1:7.2+dfsg-7+deb12u4
qemu Debian:13
- Affected ranges
- ECOSYSTEM: < 1:8.2.0+ds-1
Update to 1:8.2.0+ds-1
qemu Debian:14
- Affected ranges
- ECOSYSTEM: < 1:8.2.0+ds-1
Update to 1:8.2.0+ds-1
qemu Ubuntu:Pro:14.04:LTS
- Versions
- 1.5.0+dfsg-3ubuntu5
- 1.5.0+dfsg-3ubuntu6
- 1.6.0+dfsg-2ubuntu1
- 1.6.0+dfsg-2ubuntu2
- 1.6.0+dfsg-2ubuntu3
- 1.6.0+dfsg-2ubuntu4
- 1.7.0+dfsg-2ubuntu1
- 1.7.0+dfsg-2ubuntu2
- 1.7.0+dfsg-2ubuntu3
- 1.7.0+dfsg-2ubuntu4
- 1.7.0+dfsg-2ubuntu5
- 1.7.0+dfsg-2ubuntu7
- 1.7.0+dfsg-2ubuntu8
- 1.7.0+dfsg-2ubuntu9
- 1.7.0+dfsg-3ubuntu1~ppa1
- 1.7.0+dfsg-3ubuntu1
- 1.7.0+dfsg-3ubuntu2
- 1.7.0+dfsg-3ubuntu3
- 1.7.0+dfsg-3ubuntu4
- 1.7.0+dfsg-3ubuntu5
- 1.7.0+dfsg-3ubuntu6
- 1.7.0+dfsg-3ubuntu7
- 2.0.0~rc1+dfsg-0ubuntu1
- 2.0.0~rc1+dfsg-0ubuntu2
- 2.0.0~rc1+dfsg-0ubuntu3
- 2.0.0~rc1+dfsg-0ubuntu3.1
- 2.0.0+dfsg-2ubuntu1
- 2.0.0+dfsg-2ubuntu1.1
- 2.0.0+dfsg-2ubuntu1.2
- 2.0.0+dfsg-2ubuntu1.3
- 2.0.0+dfsg-2ubuntu1.5
- 2.0.0+dfsg-2ubuntu1.6
- 2.0.0+dfsg-2ubuntu1.7
- 2.0.0+dfsg-2ubuntu1.8
- 2.0.0+dfsg-2ubuntu1.9
- 2.0.0+dfsg-2ubuntu1.10
- 2.0.0+dfsg-2ubuntu1.11
- 2.0.0+dfsg-2ubuntu1.13
- 2.0.0+dfsg-2ubuntu1.14
- 2.0.0+dfsg-2ubuntu1.15
- 2.0.0+dfsg-2ubuntu1.16
- 2.0.0+dfsg-2ubuntu1.17
- 2.0.0+dfsg-2ubuntu1.18
- 2.0.0+dfsg-2ubuntu1.19
- 2.0.0+dfsg-2ubuntu1.20
- 2.0.0+dfsg-2ubuntu1.21
- 2.0.0+dfsg-2ubuntu1.22
- 2.0.0+dfsg-2ubuntu1.24
- 2.0.0+dfsg-2ubuntu1.25
- 2.0.0+dfsg-2ubuntu1.26
- 2.0.0+dfsg-2ubuntu1.27
- 2.0.0+dfsg-2ubuntu1.28
- 2.0.0+dfsg-2ubuntu1.29
- 2.0.0+dfsg-2ubuntu1.30
- 2.0.0+dfsg-2ubuntu1.31
- 2.0.0+dfsg-2ubuntu1.32
- 2.0.0+dfsg-2ubuntu1.33
- 2.0.0+dfsg-2ubuntu1.34
- 2.0.0+dfsg-2ubuntu1.35
- 2.0.0+dfsg-2ubuntu1.36
- 2.0.0+dfsg-2ubuntu1.38
- 2.0.0+dfsg-2ubuntu1.39
- 2.0.0+dfsg-2ubuntu1.40
- 2.0.0+dfsg-2ubuntu1.41
- 2.0.0+dfsg-2ubuntu1.42
- 2.0.0+dfsg-2ubuntu1.43
- 2.0.0+dfsg-2ubuntu1.44
- 2.0.0+dfsg-2ubuntu1.45
- 2.0.0+dfsg-2ubuntu1.46
- 2.0.0+dfsg-2ubuntu1.47
- 2.0.0+dfsg-2ubuntu1.47+esm1
- 2.0.0+dfsg-2ubuntu1.47+esm2
- 2.0.0+dfsg-2ubuntu1.47+esm3
- Affected ranges
- ECOSYSTEM: < 2.0.0+dfsg-2ubuntu1.47+esm4
Update to 2.0.0+dfsg-2ubuntu1.47+esm4
qemu Ubuntu:Pro:16.04:LTS
- Versions
- 1:2.3+dfsg-5ubuntu9
- 1:2.3+dfsg-5ubuntu10
- 1:2.4+dfsg-4ubuntu1
- 1:2.4+dfsg-4ubuntu2
- 1:2.4+dfsg-4ubuntu3
- 1:2.4+dfsg-5ubuntu3
- 1:2.5+dfsg-1ubuntu2
- 1:2.5+dfsg-1ubuntu3
- 1:2.5+dfsg-1ubuntu4
- 1:2.5+dfsg-1ubuntu5
- 1:2.5+dfsg-5ubuntu1
- 1:2.5+dfsg-5ubuntu2
- 1:2.5+dfsg-5ubuntu4
- 1:2.5+dfsg-5ubuntu6
- 1:2.5+dfsg-5ubuntu7
- 1:2.5+dfsg-5ubuntu10
- 1:2.5+dfsg-5ubuntu10.1
- 1:2.5+dfsg-5ubuntu10.2
- 1:2.5+dfsg-5ubuntu10.3
- 1:2.5+dfsg-5ubuntu10.4
- 1:2.5+dfsg-5ubuntu10.5
- 1:2.5+dfsg-5ubuntu10.6
- 1:2.5+dfsg-5ubuntu10.7
- 1:2.5+dfsg-5ubuntu10.8
- 1:2.5+dfsg-5ubuntu10.9
- 1:2.5+dfsg-5ubuntu10.10
- 1:2.5+dfsg-5ubuntu10.11
- 1:2.5+dfsg-5ubuntu10.13
- 1:2.5+dfsg-5ubuntu10.14
- 1:2.5+dfsg-5ubuntu10.15
- 1:2.5+dfsg-5ubuntu10.16
- 1:2.5+dfsg-5ubuntu10.20
- 1:2.5+dfsg-5ubuntu10.21
- 1:2.5+dfsg-5ubuntu10.22
- 1:2.5+dfsg-5ubuntu10.24
- 1:2.5+dfsg-5ubuntu10.25
- 1:2.5+dfsg-5ubuntu10.26
- 1:2.5+dfsg-5ubuntu10.28
- 1:2.5+dfsg-5ubuntu10.29
- 1:2.5+dfsg-5ubuntu10.30
- 1:2.5+dfsg-5ubuntu10.31
- 1:2.5+dfsg-5ubuntu10.32
- 1:2.5+dfsg-5ubuntu10.33
- 1:2.5+dfsg-5ubuntu10.34
- 1:2.5+dfsg-5ubuntu10.35
- 1:2.5+dfsg-5ubuntu10.36
- 1:2.5+dfsg-5ubuntu10.37
- 1:2.5+dfsg-5ubuntu10.38
- 1:2.5+dfsg-5ubuntu10.39
- 1:2.5+dfsg-5ubuntu10.40
- 1:2.5+dfsg-5ubuntu10.41
- 1:2.5+dfsg-5ubuntu10.42
- 1:2.5+dfsg-5ubuntu10.43
- 1:2.5+dfsg-5ubuntu10.44
- 1:2.5+dfsg-5ubuntu10.45
- 1:2.5+dfsg-5ubuntu10.46
- 1:2.5+dfsg-5ubuntu10.47
- 1:2.5+dfsg-5ubuntu10.48
- 1:2.5+dfsg-5ubuntu10.49
- 1:2.5+dfsg-5ubuntu10.51
- 1:2.5+dfsg-5ubuntu10.51+esm1
- 1:2.5+dfsg-5ubuntu10.51+esm2
- Affected ranges
- ECOSYSTEM: < 1:2.5+dfsg-5ubuntu10.51+esm3
Update to 1:2.5+dfsg-5ubuntu10.51+esm3
qemu Ubuntu:Pro:18.04:LTS
- Versions
- 1:2.10+dfsg-0ubuntu3
- 1:2.10+dfsg-0ubuntu4
- 1:2.10+dfsg-0ubuntu5
- 1:2.11+dfsg-1ubuntu1
- 1:2.11+dfsg-1ubuntu2
- 1:2.11+dfsg-1ubuntu4
- 1:2.11+dfsg-1ubuntu5
- 1:2.11+dfsg-1ubuntu6
- 1:2.11+dfsg-1ubuntu7
- 1:2.11+dfsg-1ubuntu7.1
- 1:2.11+dfsg-1ubuntu7.2
- 1:2.11+dfsg-1ubuntu7.3
- 1:2.11+dfsg-1ubuntu7.4
- 1:2.11+dfsg-1ubuntu7.5
- 1:2.11+dfsg-1ubuntu7.6
- 1:2.11+dfsg-1ubuntu7.7
- 1:2.11+dfsg-1ubuntu7.8
- 1:2.11+dfsg-1ubuntu7.9
- 1:2.11+dfsg-1ubuntu7.10
- 1:2.11+dfsg-1ubuntu7.12
- 1:2.11+dfsg-1ubuntu7.13
- 1:2.11+dfsg-1ubuntu7.14
- 1:2.11+dfsg-1ubuntu7.15
- 1:2.11+dfsg-1ubuntu7.17
- 1:2.11+dfsg-1ubuntu7.18
- 1:2.11+dfsg-1ubuntu7.19
- 1:2.11+dfsg-1ubuntu7.20
- 1:2.11+dfsg-1ubuntu7.21
- 1:2.11+dfsg-1ubuntu7.22
- 1:2.11+dfsg-1ubuntu7.23
- 1:2.11+dfsg-1ubuntu7.25
- 1:2.11+dfsg-1ubuntu7.26
- 1:2.11+dfsg-1ubuntu7.27
- 1:2.11+dfsg-1ubuntu7.28
- 1:2.11+dfsg-1ubuntu7.29
- 1:2.11+dfsg-1ubuntu7.31
- 1:2.11+dfsg-1ubuntu7.32
- 1:2.11+dfsg-1ubuntu7.33
- 1:2.11+dfsg-1ubuntu7.34
- 1:2.11+dfsg-1ubuntu7.35
- 1:2.11+dfsg-1ubuntu7.36
- 1:2.11+dfsg-1ubuntu7.37
- 1:2.11+dfsg-1ubuntu7.38
- 1:2.11+dfsg-1ubuntu7.39
- 1:2.11+dfsg-1ubuntu7.40
- 1:2.11+dfsg-1ubuntu7.41
- 1:2.11+dfsg-1ubuntu7.42
- 1:2.11+dfsg-1ubuntu7.42+esm1
- Affected ranges
- ECOSYSTEM: < 1:2.11+dfsg-1ubuntu7.42+esm2
Update to 1:2.11+dfsg-1ubuntu7.42+esm2
qemu Ubuntu:20.04:LTS
- Versions
- 1:4.0+dfsg-0ubuntu9
- 1:4.0+dfsg-0ubuntu10
- 1:4.2-1ubuntu1
- 1:4.2-1ubuntu2
- 1:4.2-3ubuntu1
- 1:4.2-3ubuntu2
- 1:4.2-3ubuntu3
- 1:4.2-3ubuntu4
- 1:4.2-3ubuntu5
- 1:4.2-3ubuntu6
- 1:4.2-3ubuntu6.1
- 1:4.2-3ubuntu6.2
- 1:4.2-3ubuntu6.3
- 1:4.2-3ubuntu6.4
- 1:4.2-3ubuntu6.5
- 1:4.2-3ubuntu6.6
- 1:4.2-3ubuntu6.7
- 1:4.2-3ubuntu6.8
- 1:4.2-3ubuntu6.9
- 1:4.2-3ubuntu6.10
- 1:4.2-3ubuntu6.11
- 1:4.2-3ubuntu6.12
- 1:4.2-3ubuntu6.14
- 1:4.2-3ubuntu6.15
- 1:4.2-3ubuntu6.16
- 1:4.2-3ubuntu6.17
- 1:4.2-3ubuntu6.18
- 1:4.2-3ubuntu6.19
- 1:4.2-3ubuntu6.21
- 1:4.2-3ubuntu6.23
- 1:4.2-3ubuntu6.24
- 1:4.2-3ubuntu6.25
- 1:4.2-3ubuntu6.26
- 1:4.2-3ubuntu6.27
- 1:4.2-3ubuntu6.28
- 1:4.2-3ubuntu6.29
- Affected ranges
- ECOSYSTEM: < 1:4.2-3ubuntu6.30
Update to 1:4.2-3ubuntu6.30
qemu Ubuntu:22.04:LTS
- Versions
- 1:6.0+dfsg-2expubuntu1
- 1:6.0+dfsg-2expubuntu2
- 1:6.0+dfsg-2expubuntu4
- 1:6.2+dfsg-2ubuntu5
- 1:6.2+dfsg-2ubuntu6
- 1:6.2+dfsg-2ubuntu6.1
- 1:6.2+dfsg-2ubuntu6.2
- 1:6.2+dfsg-2ubuntu6.3
- 1:6.2+dfsg-2ubuntu6.4
- 1:6.2+dfsg-2ubuntu6.5
- 1:6.2+dfsg-2ubuntu6.6
- 1:6.2+dfsg-2ubuntu6.7
- 1:6.2+dfsg-2ubuntu6.8
- 1:6.2+dfsg-2ubuntu6.9
- 1:6.2+dfsg-2ubuntu6.10
- 1:6.2+dfsg-2ubuntu6.11
- 1:6.2+dfsg-2ubuntu6.12
- 1:6.2+dfsg-2ubuntu6.13
- 1:6.2+dfsg-2ubuntu6.14
- 1:6.2+dfsg-2ubuntu6.15
- 1:6.2+dfsg-2ubuntu6.16
- 1:6.2+dfsg-2ubuntu6.17
- 1:6.2+dfsg-2ubuntu6.18
- 1:6.2+dfsg-2ubuntu6.19
- 1:6.2+dfsg-2ubuntu6.21
- 1:6.2+dfsg-2ubuntu6.22
- 1:6.2+dfsg-2ubuntu6.23
- Affected ranges
- ECOSYSTEM: < 1:6.2+dfsg-2ubuntu6.24
Update to 1:6.2+dfsg-2ubuntu6.24
Original sources
- https://access.redhat.com/errata/RHSA-2024:0135
- https://access.redhat.com/errata/RHSA-2024:0404
- https://access.redhat.com/errata/RHSA-2024:0569
- https://access.redhat.com/errata/RHSA-2024:2135
- https://access.redhat.com/security/cve/CVE-2023-3019
- https://bugzilla.redhat.com/show_bug.cgi?id=2222351
- https://security.netapp.com/advisory/ntap-20230831-0005/
- https://lists.debian.org/debian-lts-announce/2025/04/msg00042.html
- https://cert-portal.siemens.com/productcert/html/ssa-577017.html
- https://nvd.nist.gov/vuln/detail/CVE-2023-3019