CVE-2023-3019: Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()

Modified

AliasesRHSA-2024:0135UBUNTU-CVE-2023-3019DEBIAN-CVE-2023-3019

Published 24-07-2023Last modified 12-05-2026

Vulnerability summary

CVE-2023-3019 is a medium (CVSS 6.5) Use After Free vulnerability in qemu. EPSS estimates a 0.32% chance of exploitation in the next 30 days, higher than 24.7% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 6, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

6.5/10

010

Medium · v3.1 (NVD)

EPSS score

0.32%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 9 · Related 4

DLA-4144-1 MGASA-2024-0387 RHSA-2024:0404 RHSA-2024:0569 RHSA-2024:2135 SUSE-SU-2024:1394-1+3 more

Timeline

24-07-2023
PublishedVulnerability first disclosed.
12-05-2026
Last modifiedVulnerability information updated.

Description

A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.

CVSS metrics

5 scores · 5 sources · 1 version

v3.16.5

EPSS trend

Probability

0.32%

Chance of exploitation in the next 30 days

Percentile

25%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.32% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-416Use After FreeThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected systems

Version check

Known conditions: local access, administrative account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat197 products

enterprise_linux8.0 | 9.0
hivex< 0:1.3.18-23.module+el8.9.0+18724+20190c23
hivex-debuginfo< 0:1.3.18-23.module+el8.9.0+18724+20190c23
hivex-debugsource< 0:1.3.18-23.module+el8.9.0+18724+20190c23
hivex-devel< 0:1.3.18-23.module+el8.9.0+18724+20190c23

libguestfs< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-appliance< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-bash-completion< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-debuginfo< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-debugsource< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-devel< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-gfs2< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-gobject< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-gobject-debuginfo< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-gobject-devel< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-inspect-icons< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-java< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-java-debuginfo< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-java-devel< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-javadoc< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-man-pages-ja< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-man-pages-uk< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-rescue< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-rsync< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-tools< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-tools-c< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-tools-c-debuginfo< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libguestfs-winsupport< 0:8.9-1.module+el8.9.0+19846+58c50e4e
libguestfs-xfs< 1:1.44.0-9.module+el8.9.0+18724+20190c23
libiscsi< 0:1.18.0-8.module+el8.9.0+18724+20190c23
libiscsi-debuginfo< 0:1.18.0-8.module+el8.9.0+18724+20190c23
libiscsi-debugsource< 0:1.18.0-8.module+el8.9.0+18724+20190c23
libiscsi-devel< 0:1.18.0-8.module+el8.9.0+18724+20190c23
libiscsi-utils< 0:1.18.0-8.module+el8.9.0+18724+20190c23
libiscsi-utils-debuginfo< 0:1.18.0-8.module+el8.9.0+18724+20190c23
libnbd< 0:1.6.0-5.module+el8.9.0+18724+20190c23
libnbd-bash-completion< 0:1.6.0-5.module+el8.9.0+18724+20190c23
libnbd-debuginfo< 0:1.6.0-5.module+el8.9.0+18724+20190c23
libnbd-debugsource< 0:1.6.0-5.module+el8.9.0+18724+20190c23
libnbd-devel< 0:1.6.0-5.module+el8.9.0+18724+20190c23
libtpms< 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.9.0+18724+20190c23
libtpms-debuginfo< 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.9.0+18724+20190c23
libtpms-debugsource< 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.9.0+18724+20190c23
libtpms-devel< 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.9.0+18724+20190c23
libvirt< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-client< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-client-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-config-network< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-config-nwfilter< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-interface< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-interface-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-network< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-network-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-nodedev< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-nodedev-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-nwfilter< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-nwfilter-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-qemu< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-qemu-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-secret< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-secret-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-core< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-core-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-disk< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-disk-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-gluster< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-gluster-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-iscsi< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-iscsi-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-iscsi-direct< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-iscsi-direct-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-logical< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-logical-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-mpath< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-mpath-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-rbd< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-rbd-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-scsi< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-driver-storage-scsi-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-daemon-kvm< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-dbus< 0:1.3.0-2.module+el8.9.0+18724+20190c23
libvirt-dbus-debuginfo< 0:1.3.0-2.module+el8.9.0+18724+20190c23
libvirt-dbus-debugsource< 0:1.3.0-2.module+el8.9.0+18724+20190c23
libvirt-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-debugsource< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-devel< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-docs< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-libs< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-libs-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-lock-sanlock< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-lock-sanlock-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-nss< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-nss-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-python< 0:8.0.0-2.module+el8.9.0+18724+20190c23
libvirt-python-debugsource< 0:8.0.0-2.module+el8.9.0+18724+20190c23
libvirt-wireshark< 0:8.0.0-22.module+el8.9.0+19544+b3045133
libvirt-wireshark-debuginfo< 0:8.0.0-22.module+el8.9.0+19544+b3045133
lua-guestfs< 1:1.44.0-9.module+el8.9.0+18724+20190c23
lua-guestfs-debuginfo< 1:1.44.0-9.module+el8.9.0+18724+20190c23
nbdfuse< 0:1.6.0-5.module+el8.9.0+18724+20190c23
nbdfuse-debuginfo< 0:1.6.0-5.module+el8.9.0+18724+20190c23
nbdkit< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-bash-completion< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-basic-filters< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-basic-filters-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-basic-plugins< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-basic-plugins-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-curl-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-curl-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-debugsource< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-devel< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-example-plugins< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-example-plugins-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-gzip-filter< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-gzip-filter-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-gzip-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-gzip-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-linuxdisk-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-linuxdisk-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-nbd-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-nbd-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-python-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-python-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-server< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-server-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-ssh-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-ssh-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-tar-filter< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-tar-filter-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-tar-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-tar-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-tmpdisk-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-tmpdisk-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-vddk-plugin< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-vddk-plugin-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-xz-filter< 0:1.24.0-5.module+el8.9.0+18724+20190c23
nbdkit-xz-filter-debuginfo< 0:1.24.0-5.module+el8.9.0+18724+20190c23
netcf< 0:0.2.8-12.module+el8.9.0+18724+20190c23
netcf-debuginfo< 0:0.2.8-12.module+el8.9.0+18724+20190c23
netcf-debugsource< 0:0.2.8-12.module+el8.9.0+18724+20190c23
netcf-devel< 0:0.2.8-12.module+el8.9.0+18724+20190c23
netcf-libs< 0:0.2.8-12.module+el8.9.0+18724+20190c23
netcf-libs-debuginfo< 0:0.2.8-12.module+el8.9.0+18724+20190c23
ocaml-hivex< 0:1.3.18-23.module+el8.9.0+18724+20190c23
ocaml-hivex-debuginfo< 0:1.3.18-23.module+el8.9.0+18724+20190c23
ocaml-hivex-devel< 0:1.3.18-23.module+el8.9.0+18724+20190c23
ocaml-libguestfs< 1:1.44.0-9.module+el8.9.0+18724+20190c23
ocaml-libguestfs-debuginfo< 1:1.44.0-9.module+el8.9.0+18724+20190c23
ocaml-libguestfs-devel< 1:1.44.0-9.module+el8.9.0+18724+20190c23
ocaml-libnbd< 0:1.6.0-5.module+el8.9.0+18724+20190c23
ocaml-libnbd-debuginfo< 0:1.6.0-5.module+el8.9.0+18724+20190c23
ocaml-libnbd-devel< 0:1.6.0-5.module+el8.9.0+18724+20190c23
perl-hivex< 0:1.3.18-23.module+el8.9.0+18724+20190c23
perl-hivex-debuginfo< 0:1.3.18-23.module+el8.9.0+18724+20190c23
perl-Sys-Guestfs< 1:1.44.0-9.module+el8.9.0+18724+20190c23
perl-Sys-Guestfs-debuginfo< 1:1.44.0-9.module+el8.9.0+18724+20190c23
perl-Sys-Virt< 0:8.0.0-1.module+el8.9.0+18724+20190c23
perl-Sys-Virt-debuginfo< 0:8.0.0-1.module+el8.9.0+18724+20190c23
perl-Sys-Virt-debugsource< 0:8.0.0-1.module+el8.9.0+18724+20190c23
python3-hivex< 0:1.3.18-23.module+el8.9.0+18724+20190c23
python3-hivex-debuginfo< 0:1.3.18-23.module+el8.9.0+18724+20190c23
python3-libguestfs< 1:1.44.0-9.module+el8.9.0+18724+20190c23
python3-libguestfs-debuginfo< 1:1.44.0-9.module+el8.9.0+18724+20190c23
python3-libnbd< 0:1.6.0-5.module+el8.9.0+18724+20190c23
python3-libnbd-debuginfo< 0:1.6.0-5.module+el8.9.0+18724+20190c23
python3-libvirt< 0:8.0.0-2.module+el8.9.0+18724+20190c23
python3-libvirt-debuginfo< 0:8.0.0-2.module+el8.9.0+18724+20190c23
qemu-guest-agent< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-guest-agent-debuginfo< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-img< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-img-debuginfo< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-block-curl< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-block-curl-debuginfo< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-block-gluster< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-block-gluster-debuginfo< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-block-iscsi< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-block-iscsi-debuginfo< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-block-rbd< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-block-rbd-debuginfo< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-block-ssh< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-block-ssh-debuginfo< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-common< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-common-debuginfo< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-core< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-core-debuginfo< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-debuginfo< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-debugsource< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-docs< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-hw-usbredir< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-hw-usbredir-debuginfo< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-tests< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2
qemu-kvm-ui-opengl< 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2

Show all 197

Debian1 product

qemu< 1:7.2+dfsg-7+deb12u4 | < 1:8.2.0+ds-1

Qemu1 product

qemu< 8.2.0

Ubuntu1 product

qemu< 2.0.0+dfsg-2ubuntu1.47+esm4 | < 1:2.5+dfsg-5ubuntu10.51+esm3 | < 1:2.11+dfsg-1ubuntu7.42+esm2 | < 1:4.2-3ubuntu6.30 | < 1:6.2+dfsg-2ubuntu6.24

4 vendors · 200 products · Showing 200 of 234

References

16 links

access.redhat.com/errata/RHSA-2024:0135Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2024:0404Vendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2024:0569Vendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2024:2135Vendor AdvisoryX Refsource REDHAT
access.redhat.com/security/cve/CVE-2023-3019VDB EntryX Refsource REDHATREPORTThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=2222351Issue TrackingX Refsource REDHATREPORTPatchThird Party Advisory
security.netapp.com/advisory/ntap-20230831-0005/X Transferred
lists.debian.org/debian-lts-announce/2025/04/msg00042.html
cert-portal.siemens.com/productcert/html/ssa-577017.html
access.redhat.com/security/updates/classification/ARTICLE

Show all 16 references

security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0135.jsonAdvisory
www.cve.org/CVERecord?id=CVE-2023-3019AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2023-3019AdvisoryOval
ubuntu.com/security/CVE-2023-3019REPORT
ubuntu.com/security/notices/USN-7094-1Advisory
security-tracker.debian.org/tracker/CVE-2023-3019Advisory