Stack-based Buffer Overflow Affecting virt:rhel/libvirt-daemon-config-network package, versions <0:8.0.0-23.module+el8.10.0+21023+5962ee04


Severity

Recommended
0.0
medium
0
10

Based on Red Hat Enterprise Linux security rating.

Threat Intelligence

EPSS
0.05% (18th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL8-VIRT-7063336
  • published23 May 2024
  • disclosed2 Jan 2024

Introduced: 2 Jan 2024

CVE-2023-6693  (opens in a new tab)
CWE-121  (opens in a new tab)

How to fix?

Upgrade RHEL:8 virt:rhel/libvirt-daemon-config-network to version 0:8.0.0-23.module+el8.10.0+21023+5962ee04 or higher.
This issue was patched in RHSA-2024:2962.

NVD Description

Note: Versions mentioned in the description apply only to the upstream virt:rhel/libvirt-daemon-config-network package and not the virt:rhel/libvirt-daemon-config-network package as distributed by RHEL. See How to fix? for RHEL:8 relevant fixed versions and status.

A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtio_net_flush_tx function if guest features VIRTIO_NET_F_HASH_REPORT, VIRTIO_F_VERSION_1 and VIRTIO_NET_F_MRG_RXBUF are enabled. This could allow a malicious user to overwrite local variables allocated on the stack. Specifically, the out_sg variable could be used to read a part of process memory and send it to the wire, causing an information leak.

CVSS Scores

version 3.1