{"id":"CVE-2023-3019","title":"Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()","summary":"A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.","severity":"medium","cvss":6,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvssSource":"cna","cwe":["CWE-416"],"vendor":"Red Hat","product":"virt-devel:rhel","affected":["virt-devel:rhel (all versions)","virt:rhel (all versions)","virt-devel:rhel (all versions)","virt:rhel (all versions)","virt-devel:rhel (all versions)","virt:rhel (all versions)","qemu-kvm (all versions)","qemu-kvm","qemu-kvm","qemu-kvm-ma","virt:av/qemu-kvm (all versions)"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-12-03T15:26:38.315489Z"},"published":"2023-07-24","updated":"2026-11-07","sourceUpdated":"2026-11-07T13:41:42.165Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-3019","references":[{"url":"https://access.redhat.com/errata/RHSA-2024:0135","label":"RHSA-2024:0135"},{"url":"https://access.redhat.com/errata/RHSA-2024:0404","label":"RHSA-2024:0404"},{"url":"https://access.redhat.com/errata/RHSA-2024:0569","label":"RHSA-2024:0569"},{"url":"https://access.redhat.com/errata/RHSA-2024:2135","label":"RHSA-2024:2135"},{"url":"https://access.redhat.com/security/cve/CVE-2023-3019"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222351","label":"RHBZ#2222351"}],"tags":["cve.org"],"epss":0.00318,"epssPercentile":0.24853,"ingestedAt":"2026-11-07T12:16:41.104Z","slug":"CVE-2023-3019","body":"## Overview\n\nA DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.\n\n## Affected\n\n- `virt-devel:rhel (all versions)`\n- `virt:rhel (all versions)`\n- `virt-devel:rhel (all versions)`\n- `virt:rhel (all versions)`\n- `virt-devel:rhel (all versions)`\n- `virt:rhel (all versions)`\n- `qemu-kvm (all versions)`\n- `qemu-kvm`\n- `qemu-kvm`\n- `qemu-kvm-ma`\n- `virt:av/qemu-kvm (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":33,"depthScoreParts":{"impact":33,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}