CVE - CVE-2023-4135

CVE-ID
CVE-2023-4135	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can be disclosed.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:https://security.netapp.com/advisory/ntap-20230915-0012/ MISC:RHBZ#2229101 URL:https://bugzilla.redhat.com/show_bug.cgi?id=2229101 MISC:https://access.redhat.com/security/cve/CVE-2023-4135 URL:https://access.redhat.com/security/cve/CVE-2023-4135 MISC:https://www.zerodayinitiative.com/advisories/ZDI-CAN-21521 URL:https://www.zerodayinitiative.com/advisories/ZDI-CAN-21521
Assigning CNA
Red Hat, Inc.
Date Record Created
20230803	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20230803)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)