CVE-2023-4135
qemu: A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU
CVE-2023-4135 is fixed in 120 products on 1 platform, first by DEBIAN-CVE-2023-4135, released August 4, 2023. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
6.5
medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0037
31st percentile
A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can be disclosed.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| hivex · ol 8 | 0:1.3.18-23.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| hivex-devel · ol 8 | 0:1.3.18-23.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-appliance · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-bash-completion · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-devel · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-gfs2 · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-gobject · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-gobject-devel · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-inspect-icons · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-java · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-java-devel · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-javadoc · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-man-pages-ja · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-man-pages-uk · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-rescue · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-rsync · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-tools · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-tools-c · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-winsupport · ol 8 | 0:8.6-1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libguestfs-xfs · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libiscsi · ol 8 | 0:1.18.0-8.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libiscsi-devel · ol 8 | 0:1.18.0-8.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libiscsi-utils · ol 8 | 0:1.18.0-8.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libnbd · ol 8 | 0:1.6.0-5.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libnbd-bash-completion · ol 8 | 0:1.6.0-5.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libnbd-devel · ol 8 | 0:1.6.0-5.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libtpms · ol 8 | 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libtpms-devel · ol 8 | 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-client · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-config-network · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-config-nwfilter · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-driver-interface · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-driver-network · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-driver-nodedev · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-driver-nwfilter · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-driver-qemu · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-driver-secret · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-driver-storage · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-driver-storage-core · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-driver-storage-disk · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-driver-storage-gluster · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-driver-storage-iscsi · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-driver-storage-iscsi-direct · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-driver-storage-logical · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-driver-storage-mpath · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-driver-storage-rbd · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-driver-storage-scsi · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-daemon-kvm · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-dbus · ol 8 | 0:1.3.0-2.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-devel · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-docs · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-libs · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-lock-sanlock · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-nss · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| libvirt-wireshark · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| lua-guestfs · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdfuse · ol 8 | 0:1.6.0-5.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-bash-completion · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-basic-filters · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-basic-plugins · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-curl-plugin · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-devel · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-example-plugins · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-gzip-filter · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-gzip-plugin · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-linuxdisk-plugin · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-nbd-plugin · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-python-plugin · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-server · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-ssh-plugin · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-tar-filter · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-tar-plugin · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-tmpdisk-plugin · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-vddk-plugin · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| nbdkit-xz-filter · ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| netcf · ol 8 | 0:0.2.8-12.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| netcf-devel · ol 8 | 0:0.2.8-12.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| netcf-libs · ol 8 | 0:0.2.8-12.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| perl-Sys-Guestfs · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| perl-Sys-Virt · ol 8 | 0:6.0.0-1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| perl-hivex · ol 8 | 0:1.3.18-23.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| python3-hivex · ol 8 | 0:1.3.18-23.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| python3-libguestfs · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| python3-libnbd · ol 8 | 0:1.6.0-5.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| python3-libvirt · ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| qemu · Debian 13.5 (trixie) | 1:8.0.4+dfsg-2 | DEBIAN-CVE-2023-4135 | Aug 4, 2023 |
| qemu · Debian 14 | 1:8.0.4+dfsg-2 | DEBIAN-CVE-2023-4135 | Aug 4, 2023 |
| qemu-guest-agent · ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| qemu-img · ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| qemu-kvm · ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| qemu-kvm-block-curl · ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| qemu-kvm-block-gluster · ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| qemu-kvm-block-iscsi · ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| qemu-kvm-block-rbd · ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| qemu-kvm-block-ssh · ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| qemu-kvm-common · ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| qemu-kvm-core · ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| qemu-virtiofsd · ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| ruby-hivex · ol 8 | 0:1.3.18-23.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| ruby-libguestfs · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| seabios · ol 8 | 0:1.15.0-2.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| seabios-bin · ol 8 | 0:1.15.0-2.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| seavgabios-bin · ol 8 | 0:1.15.0-2.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| sgabios · ol 8 | 1:0.20170427git-3.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| sgabios-bin · ol 8 | 1:0.20170427git-3.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| supermin · ol 8 | 0:5.2.1-1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| supermin-devel · ol 8 | 0:5.2.1-1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| swtpm · ol 8 | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| swtpm-devel · ol 8 | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| swtpm-libs · ol 8 | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| swtpm-tools · ol 8 | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| swtpm-tools-pkcs11 · ol 8 | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| virt-dib · ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| virt-v2v · ol 8 | 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| virt-v2v-bash-completion · ol 8 | 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| virt-v2v-man-pages-ja · ol 8 | 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
| virt-v2v-man-pages-uk · ol 8 | 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 | Sep 2, 2024 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.