[Git][security-tracker-team/security-tracker][master] Add CVE-2023-3019/qemu

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Jul 13 07:18:17 BST 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bebe3a0c by Salvatore Bonaccorso at 2023-07-13T08:17:34+02:00
Add CVE-2023-3019/qemu

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -208,6 +208,10 @@ CVE-2023-3080 (The WP Mail Catcher plugin for WordPress is vulnerable to Stored
 	NOT-FOR-US: WP Mail Catcher plugin for WordPress
 CVE-2023-3023 (The WP EasyCart plugin for WordPress is vulnerable to time-based SQL I ...)
 	NOT-FOR-US: WP EasyCart plugin for WordPress
+CVE-2023-3019 [e1000e: heap use-after-free in e1000e_write_packet_to_guest()]
+	- qemu <unfixed>
+	NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59243
+	NOTE: Proposed upstream patch: https://lists.nongnu.org/archive/html/qemu-devel/2023-05/msg08310.html
 CVE-2023-3011 (The ARMember plugin for WordPress is vulnerable to Cross-Site Request  ...)
 	NOT-FOR-US: ARMember plugin for WordPress
 CVE-2023-37767 (GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a seg ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bebe3a0c601f63ee32573b3b7cdd78d7ccd668ec

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bebe3a0c601f63ee32573b3b7cdd78d7ccd668ec
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230713/8fd8c2e1/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list