Riskcovery

CVE-2023-6693

Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()

State
Published
Severity
4.9 Medium
Published
Jan 2, 2024
Updated
Feb 25, 2026
Reserved
Dec 11, 2023

Read the record on cve.org

Description

A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtio_net_flush_tx function if guest features VIRTIO_NET_F_HASH_REPORT, VIRTIO_F_VERSION_1 and VIRTIO_NET_F_MRG_RXBUF are enabled. This could allow a malicious user to overwrite local variables allocated on the stack. Specifically, the `out_sg` variable could be used to read a part of process memory and send it to the wire, causing an information leak.

Scores

CVSSScoreVectorSource
3.14.9 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:Lredhat

Weaknesses

  • CWE-121 Stack-based Buffer Overflow

Affected Products

ProductVersions
Red Hat Enterprise Linux 8Red Hat
  • 8100020240314161907.e155f54d and laterNot affected
Red Hat Enterprise Linux 8Red Hat
  • 8100020240314161907.e155f54d and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 17:9.0.0-10.el9_5.3 and laterNot affected
Red Hat Enterprise Linux 6Red Hat
    Red Hat Enterprise Linux 7Red Hat
      Red Hat Enterprise Linux 7Red Hat
        Red Hat Enterprise Linux 8 Advanced VirtualizationRed Hat

          References

          Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.