A flaw was found in the QEMU virtual...... CVE-2023-3180
-
AV
AC
AU
C
I
A
发布：
2023-08-03
修订：
2023-11-07
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有7条受影响产品信息
