CVE-2023-6693

MEDIUM

QEMU < 8.2.1 - Stack-based Buffer Overflow in virtio-net TX Flush

Title source: llm
STIX 2.1

Description

A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtio_net_flush_tx function if guest features VIRTIO_NET_F_HASH_REPORT, VIRTIO_F_VERSION_1 and VIRTIO_NET_F_MRG_RXBUF are enabled. This could allow a malicious user to overwrite local variables allocated on the stack. Specifically, the `out_sg` variable could be used to read a part of process memory and send it to the wire, causing an information leak.

References (7)

Core 7
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:2962
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2025:4492
Third Party Advisory vdb-entry x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2023-6693
Issue Tracking, Patch issue-tracking x_refsource_redhat
https://bugzilla.redhat.com/show_bug.cgi?id=2254580

Scores

CVSS v3 4.9
EPSS 0.0003
EPSS Percentile 7.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-121 CWE-787
Status published
Products (4)
fedoraproject/fedora 39
qemu/qemu < 8.2.1
redhat/enterprise_linux 8.0 (2 CPE variants)
redhat/enterprise_linux 9.0
Published Jan 02, 2024
Tracked Since Feb 18, 2026