CVE-2023-40360 — NULL Pointer Dereference in Qemu

CWE-476 — NULL Pointer Dereference10 documents7 sources
Severity
5.5MEDIUMNVD
OSV3.2
EPSS
0.0%
top 87.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Qemu
Timeline
PublishedAug 14
Latest updateJun 6

Description

QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured before checking whether Flexible Data Placement is enabled.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶Debianqemu/qemu< 1:8.0.4+dfsg-2+1
▶Ubuntuqemu/qemu< 1:4.2-3ubuntu6.28+3
▶NVDqemu/qemu8.0.0 — 8.0.4

Patches

Patch: gitlab.com ↗Patch: gitlab.com ↗

🔴Vulnerability Details

5
OSV
qemu regression↗2024-06-06
▶
OSV
qemu vulnerabilities↗2024-01-08
▶
CVEList
CVE-2023-40360: QEMU through 8↗2023-08-14
▶
GHSA
GHSA-gjhx-wc4x-rwwp: QEMU through 8↗2023-08-14
▶
OSV
CVE-2023-40360: QEMU through 8↗2023-08-14
▶

📋Vendor Advisories

4
Ubuntu
QEMU regression↗2024-06-06
▶
Ubuntu
QEMU vulnerabilities↗2024-01-08
▶
Red Hat
QEMU: NVMe: NULL pointer dereference in nvme_directive_receive()↗2023-08-06
▶
Debian
CVE-2023-40360: qemu - QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/...↗2023
▶