A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
Metrics
Affected Vendors & Products
References
History
Wed, 25 Sep 2024 20:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2023-08-03T14:31:36.083Z
Updated: 2024-09-25T19:56:37.371Z
Reserved: 2023-06-09T08:30:43.335Z
Link: CVE-2023-3180
Vulnrichment
Updated: 2024-08-02T06:48:07.826Z
NVD
Status : Modified
Published: 2023-08-03T15:15:29.960
Modified: 2024-11-21T08:16:38.297
Link: CVE-2023-3180
Redhat