CVE-2023-3019

MediumCVSS 6.5/10Last modified Nov 7, 2026

Description

A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support—
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support—
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support—
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support—
Red HatRed Hat Enterprise Linux 9—
Red HatRed Hat Enterprise Linux 6—
Red HatRed Hat Enterprise Linux 7—
Red HatRed Hat Enterprise Linux 7—
Red HatRed Hat Enterprise Linux 8 Advanced Virtualization—
SiemensRUGGEDCOM ROX MX5000< V2.17.1
SiemensRUGGEDCOM ROX MX5000RE< V2.17.1
SiemensRUGGEDCOM ROX RX1400< V2.17.1
SiemensRUGGEDCOM ROX RX1500< V2.17.1
SiemensRUGGEDCOM ROX RX1501< V2.17.1
SiemensRUGGEDCOM ROX RX1510< V2.17.1
SiemensRUGGEDCOM ROX RX1511< V2.17.1
SiemensRUGGEDCOM ROX RX1512< V2.17.1
SiemensRUGGEDCOM ROX RX1524< V2.17.1
SiemensRUGGEDCOM ROX RX1536< V2.17.1
SiemensRUGGEDCOM ROX RX5000< V2.17.1

References

Timeline

Published
Jul 24, 2023
Last modified
Nov 7, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-301919.8PrestaShop cdesigner < 3.1.9 is vulnerable to SQL Injection via CdesignerTraitementModuleFrontController::initContent().CVE-2023-301929.8Prestashop possearchproducts 1.7 is vulnerable to SQL Injection via PosSearch::find().CVE-2023-301949.8Prestashop posstaticfooter <= 1.0.0 is vulnerable to SQL Injection via posstaticfooter::getPosCurrentHook().CVE-2023-301957.5In the module "Detailed Order" (lgdetailedorder) in version up to 1.1.20 from Linea Grafica for PrestaShop, a guest can download personal inCVE-2023-301967.5Prestashop salesbooster <= 1.10.4 is vulnerable to Incorrect Access Control via modules/salesbooster/downloads/download.php.CVE-2023-301977.5Incorrect Access Control in the module "My inventory" (myinventory) <= 1.6.6 from Webbax for PrestaShop, allows a guest to download personalCVE-2023-301987.5Prestashop winbizpayment <= 1.0.2 is vulnerable to Incorrect Access Control via modules/winbizpayment/downloads/download.php.CVE-2023-301997.5Prestashop customexporter <= 1.7.20 is vulnerable to Incorrect Access Control via modules/customexporter/downloads/download.php.CVE-2023-30206.1Cross-site Scripting (XSS) - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4.CVE-2023-302007.5In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” (ultimateimagetool) in versions up to 2.1.02 from Advanced Plugins for PrCVE-2023-302039.8Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the event_id parameter at /php-jms/result_sheet.pCVE-2023-302049.8Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the judge_id parameter at /php-jms/edit_judge.php
CVE-2023-3019: Medium severity, CVSS 6.5 | Vulnix