A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2023-08-03T14:31:36.083Z
Updated: 2024-08-02T06:48:07.826Z
Reserved: 2023-06-09T08:30:43.335Z
Link: CVE-2023-3180
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-08-03T15:15:29.960
Modified: 2023-11-07T14:50:08.863
Link: CVE-2023-3180
Redhat