Is CVE-2023-3019 in the CISA KEV catalog?

No. CVE-2023-3019 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2023-3019?

CVE-2023-3019 has a CVSS v3 base score of 6.0 (MEDIUM).

What is the EPSS score for CVE-2023-3019?

CVE-2023-3019 has an EPSS score of 0.30% (22th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2023-3019?

Upgrade qemu on debian 11 to 1:5.2+dfsg-11+deb11u4 or later. Fixes are available for 703 affected products.

CVE & CISA-KEV Catalog

CVE-2023-3019

MEDIUM

6.0

CVSS v3

NVD

Description

A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.

CWE-416Use After Free

How to fix

Remediation Available

qemuDebian

Fixed in:1:5.2+dfsg-11+deb11u4CVE-2023-3019

Fixed in:1:7.2+dfsg-7+deb12u4CVE-2023-3019

Fixed in:1:8.2.0+ds-1CVE-2023-3019

SLOFRed Hat / RHEL

Fixed in:0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src::virt:rhelRHSA-2024:0404

Fixed in:0:20210217-1.module+el8.9.0+20735+c763a519.1.noarch::virt:rhelRHSA-2024:0135

Fixed in:0:20210217-2.module+el8.8.0+20737+daad9f3b.noarch::virt:rhelRHSA-2024:0569

Fixed in:0:20210217-2.module+el8.8.0+20737+daad9f3b.src::virt:rhelRHSA-2024:0569

Fixed in:0:20210217-1.module+el8.6.0+14480+c0a3aa0f.noarch::virt:rhelRHSA-2024:0404

Fixed in:0:20210217-1.module+el8.9.0+20735+c763a519.1.src::virt:rhelRHSA-2024:0135

SLOFRocky

Fixed in:0:20210217-2.module+el8.8.0+20737+daad9f3b.noarch::virt:rhelRHSA-2024:0569

Fixed in:0:20210217-1.module+el8.9.0+20735+c763a519.1.src::virt:rhelRHSA-2024:0135

Fixed in:0:20210217-1.module+el8.9.0+20735+c763a519.1.noarch::virt:rhelRHSA-2024:0135

Fixed in:0:20210217-2.module+el8.8.0+20737+daad9f3b.src::virt:rhelRHSA-2024:0569

Fixed in:0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src::virt:rhelRHSA-2024:0404

Fixed in:0:20210217-1.module+el8.6.0+14480+c0a3aa0f.noarch::virt:rhelRHSA-2024:0404

SLOF-0:20210217Red Hat / RHEL

Fixed in:2.module+el8.8.0+20737+daad9f3b.src::virt-devel:rhelRHSA-2024:0569

Fixed in:1.module+el8.6.0+14480+c0a3aa0f.src::virt-devel:rhelRHSA-2024:0404

Fixed in:1.module+el8.9.0+20735+c763a519.1.src::virt-devel:rhelRHSA-2024:0135

SLOF-0:20210217Rocky

Fixed in:2.module+el8.8.0+20737+daad9f3b.src::virt-devel:rhelRHSA-2024:0569

Fixed in:1.module+el8.6.0+14480+c0a3aa0f.src::virt-devel:rhelRHSA-2024:0404

Fixed in:1.module+el8.9.0+20735+c763a519.1.src::virt-devel:rhelRHSA-2024:0135

hivexRed Hat / RHEL

Fixed in:0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.src::virt:rhelRHSA-2024:0404

Fixed in:0:1.3.18-23.module+el8.8.0+16781+9f4724c2.ppc64le::virt:rhelRHSA-2024:0569

Fixed in:0:1.3.18-23.module+el8.9.0+18724+20190c23.src::virt:rhelRHSA-2024:0135

Fixed in:0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src::virt:rhelRHSA-2024:0569

Fixed in:0:1.3.18-23.module+el8.8.0+16781+9f4724c2.x86_64::virt:rhelRHSA-2024:0569

Fixed in:0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.s390x::virt:rhelRHSA-2024:0404

Fixed in:0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.ppc64le::virt:rhelRHSA-2024:0404

Fixed in:0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.x86_64::virt:rhelRHSA-2024:0404

Fixed in:0:1.3.18-23.module+el8.9.0+18724+20190c23.s390x::virt:rhelRHSA-2024:0135

Fixed in:0:1.3.18-23.module+el8.8.0+16781+9f4724c2.aarch64::virt:rhelRHSA-2024:0569

Fixed in:0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.aarch64::virt:rhelRHSA-2024:0404

Fixed in:0:1.3.18-23.module+el8.9.0+18724+20190c23.ppc64le::virt:rhelRHSA-2024:0135

Fixed in:0:1.3.18-23.module+el8.8.0+16781+9f4724c2.s390x::virt:rhelRHSA-2024:0569

Fixed in:0:1.3.18-23.module+el8.9.0+18724+20190c23.aarch64::virt:rhelRHSA-2024:0135

Fixed in:0:1.3.18-23.module+el8.9.0+18724+20190c23.x86_64::virt:rhelRHSA-2024:0135

hivexRocky