CVE-2023-3180: Heap buffer overflow in virtio_crypto_sym_op_helper()

Vulnerability summary

CVE-2023-3180 is a medium (CVSS 6.5) Heap-based Buffer Overflow vulnerability in debian debian_linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 14.2% of scored vulnerabilities.

Timeline

1. 03-08-2023
   PublishedVulnerability first disclosed.
2. 25-09-2024
   Last modifiedVulnerability information updated.

Description

A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.

• CWE-122Heap-based Buffer OverflowThe product writes past the end of a buffer that was allocated on the heap.
• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.