CVE-2023-3019: Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()
A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.
Other sources
OSS-Fuzz reported a use-after-free issue in e1000e. This looks similar to https://gitlab.com/qemu-project/qemu/-/issues/1543. However, Alexander Bulekov confirmed that this crashes both on master and v8.0 (albeit with slightly different crash traces).
OSS-Fuzz issue: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59243
Upstream patch: https://lists.nongnu.org/archive/html/qemu-devel/2023-05/msg08310.html
— Red Hat
Qemu: e1000e: heap use-after-free in e1000ewritepackettoguest()
— Microsoft
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-3019?
The severity of CVE-2023-3019 is medium.
What is the affected software for CVE-2023-3019?
The affected software for CVE-2023-3019 includes QEMU and Red Hat Enterprise Linux 8.0 and 9.0.
How does CVE-2023-3019 impact the system?
CVE-2023-3019 can allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.
How can I fix CVE-2023-3019?
To fix CVE-2023-3019, users should update to the latest version of QEMU and apply any patches or updates provided by the vendor.
Where can I find more information about CVE-2023-3019?
You can find more information about CVE-2023-3019 on the official QEMU project gitlab, Chromium OSS-Fuzz issues, and the QEMU development mailing list.