CVE-2023-0330

Related Files

Ubuntu Security Notice USN-6167-1

Posted Jun 19, 2023

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6167-1 - It was discovered that QEMU did not properly manage the guest drivers when shared buffers are not allocated. A malicious guest driver could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10. It was discovered that QEMU did not properly check the size of the structure pointed to by the guest physical address pqxl. A malicious guest attacker could use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10.

tags | advisory, denial of service, arbitrary

systems | linux, ubuntu

advisories | CVE-2022-1050, CVE-2022-4144, CVE-2022-4172, CVE-2023-0330

SHA-256 | 2cba75998a8cdb78ec32d167bfb012d5f0977f37e53d09a890bb6240045f9e0c

Download | Favorite | View