Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-0330

Fixed in a distro release EPSS <1%CVSS 5.3

A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption bugs like stack overflow or use-after-free.

Published 2023-03-06 · CVE record · OSV

Products: qemu, debian_linux

Distro releases

ReleasePackageFixed in
Amazon Linux 2ivshmem-tools10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-audio-alsa10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-audio-oss10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-audio-pa10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-audio-sdl10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-block-curl10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-block-dmg10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-block-iscsi10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-block-nfs10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-block-rbd10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-block-ssh10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-common10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-guest-agent10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-img10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-kvm10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-kvm-core10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-system-aarch6410:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-system-aarch64-core10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-system-x8610:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-system-x86-core10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-ui-curses10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-ui-gtk10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-ui-sdl10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-user10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-user-binfmt10:3.1.0-8.amzn2.0.13
Amazon Linux 2qemu-user-static10:3.1.0-8.amzn2.0.13
Debian 10qemu1:3.1+dfsg-8+deb10u11
Debian 12qemu1:7.2+dfsg-7+deb12u1
Debian 13qemu1:8.0.2+dfsg-1
Debian 14qemu1:8.0.2+dfsg-1
SUSE Enterprise Storage 7.1qemu5.2.0-150300.127.3
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSqemu3.1.1.1-150100.80.51.5
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSqemu4.2.1-150200.79.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSqemu5.2.0-150300.127.3
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSqemu5.2.0-150300.127.3
SUSE Linux Enterprise Micro 5.1qemu5.2.0-150300.127.3
SUSE Linux Enterprise Micro 5.2qemu5.2.0-150300.127.3
SUSE Linux Enterprise Micro 5.3qemu6.2.0-150400.37.23.1
SUSE Linux Enterprise Micro 5.4qemu6.2.0-150400.37.23.1
SUSE Linux Enterprise Micro 5.5qemu7.1.0-150500.49.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP4qemu6.2.0-150400.37.23.1
SUSE Linux Enterprise Module for Basesystem 15 SP5qemu7.1.0-150500.49.6.1
SUSE Linux Enterprise Module for Server Applications 15 SP4qemu6.2.0-150400.37.23.1
SUSE Linux Enterprise Module for Server Applications 15 SP5qemu7.1.0-150500.49.6.1
SUSE Linux Enterprise Server 12 SP5qemu3.1.1.1-69.1
SUSE Linux Enterprise Server 12 SP5qemu3.1.1.1-72.1
SUSE Linux Enterprise Server 15 SP1-LTSSqemu3.1.1.1-150100.80.51.5
SUSE Linux Enterprise Server 15 SP2-LTSSqemu4.2.1-150200.79.1
SUSE Linux Enterprise Server 15 SP3-LTSSqemu5.2.0-150300.127.3
SUSE Linux Enterprise Server for SAP Applications 12 SP5qemu3.1.1.1-69.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5qemu3.1.1.1-72.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1qemu3.1.1.1-150100.80.51.5
SUSE Linux Enterprise Server for SAP Applications 15 SP2qemu4.2.1-150200.79.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3qemu5.2.0-150300.127.3
SUSE Manager Proxy 4.2qemu5.2.0-150300.127.3
SUSE Manager Server 4.2qemu5.2.0-150300.127.3
Ubuntu 20.04 LTSqemu1:4.2-3ubuntu6.27
Ubuntu 22.04 LTSqemu1:6.2+dfsg-2ubuntu6.11
Ubuntu Pro 14.04 LTSqemu2.0.0+dfsg-2ubuntu1.47+esm3
Ubuntu Pro 16.04 LTSqemu1:2.5+dfsg-5ubuntu10.51+esm2
Ubuntu Pro 18.04 LTSqemu1:2.11+dfsg-1ubuntu7.42+esm1
openSUSE Leap 15.4qemu6.2.0-150400.37.23.1
openSUSE Leap 15.4qemu4.2.1-150200.79.1
openSUSE Leap 15.5qemu7.1.0-150500.49.6.1
openSUSE Tumbleweedqemu8.0.4-1.1