CVE-2023-3180: Heap buffer overflow in virtio_crypto_sym_op_helper()
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtiocryptohandlesymreq. There is no check for the value of srclen and dstlen in virtiocryptosymophelper, potentially leading to a heap buffer overflow when the two values differ.
Other sources
A heap buffer overflow was found in virtiocryptosymophelper() in hw/virtio/virtio-crypto.c. It could occur while handling data encryption/dencryption requests in virtiocryptohandlesymreq(). There is no check for the value of the srclen and the dstlen in virtiocryptosymophelper(), so if srclen is not equal to dstlen, a heap based buff overflow occurs while encrypting/dencrypting the data.
— Red Hat
Heap buffer overflow in virtiocryptosymophelper()
— Microsoft
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-3180?
CVE-2023-3180 is a vulnerability found in the QEMU virtual crypto device that can lead to a heap buffer overflow.
What is the severity of CVE-2023-3180?
CVE-2023-3180 has a severity level of medium.
How does CVE-2023-3180 affect QEMU?
CVE-2023-3180 affects QEMU's virtual crypto device, specifically the handling of data encryption/decryption requests in virtio_crypto_handle_sym_req.
Are there any known fixes for CVE-2023-3180?
At the moment, there are no known fixes available for CVE-2023-3180.
What are the references for CVE-2023-3180?
The references for CVE-2023-3180 are: https://bugzilla.redhat.com/show_bug.cgi?id=2222424, https://access.redhat.com/security/cve/CVE-2023-3180, and https://lists.nongnu.org/archive/html/qemu-devel/2023-08/msg00401.html.