]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
qemu: Fix CVE-2023-3180
authorSoumya Sambu <soumya.sambu@windriver.com>
Wed, 4 Oct 2023 11:05:58 +0000 (11:05 +0000)
committerSteve Sakoman <steve@sakoman.com>
Thu, 5 Oct 2023 14:43:37 +0000 (04:43 -1000)
commit2038b5e977481cac2e9e35101a467fbd5268231e
tree720fa2ead42d1d9e2d9e8f137170eb7da9475113
parent9e7aaefc0d764eaecf35582bb19490cc6262f966
qemu: Fix CVE-2023-3180

A flaw was found in the QEMU virtual crypto device while handling
data encryption/decryption requests in virtio_crypto_handle_sym_req.
There is no check for the value of `src_len` and `dst_len` in
virtio_crypto_sym_op_helper, potentially leading to a heap buffer
overflow when the two values differ.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-3180

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-devtools/qemu/qemu.inc
meta/recipes-devtools/qemu/qemu/CVE-2023-3180.patch [new file with mode: 0644]