CVSS 3.1
6.3 mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:HCVE-2023-1544
Medium (6.3). EPSS 0.3% chance of exploitation in the next 30 days.
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of QEMU.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-770, CWE-125
- Published
- Modified
- Record from
- the NVD, synced
Affected
- fedoraproject:fedora
- qemu:qemu