{"schema_version":"1.9.0","id":"CVE-2023-0330","published":"2023-03-06T00:00:00Z","modified":"2026-08-12T03:51:11.957333303Z","related":["SUSE-SU-2023:3015-1","SUSE-SU-2023:3082-1","SUSE-SU-2023:3082-2","SUSE-SU-2023:3444-1","SUSE-SU-2023:3721-1","SUSE-SU-2023:3800-1","SUSE-SU-2023:4056-1","SUSE-SU-2024:1395-1","openSUSE-SU-2024:13114-1"],"summary":"Qemu: lsi53c895a: dma reentrancy issue leads to stack overflow","details":"A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption bugs like stack overflow or use-after-free.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/qemu/qemu","events":[{"introduced":"b67b00e6b4c7831a3f5bc684bc0df7a9bfd1bd56"},{"fixed":"a8f7a3504dd30f760e3f07577a7e3f0554d538ea"},{"introduced":"c1eb2ddf0f8075faddc5f7c3d39feae3e8e9d6b4"},{"last_affected":"7dbd6f8a27e30fe14adb3d5869097cddf24038d6"}],"database_specific":{"cpe":["cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","cpe:2.3:a:qemu:qemu:8.0.0:-:*:*:*:*:*:*","cpe:2.3:a:qemu:qemu:8.0.0:rc0:*:*:*:*:*:*","cpe:2.3:a:qemu:qemu:8.0.0:rc1:*:*:*:*:*:*","cpe:2.3:a:qemu:qemu:8.0.0:rc2:*:*:*:*:*:*","cpe:2.3:a:qemu:qemu:8.0.0:rc3:*:*:*:*:*:*","cpe:2.3:a:qemu:qemu:8.0.0:rc4:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.2.0"},{"fixed":"7.2.3"},{"introduced":"8.0.0-NA"},{"last_affected":"8.0.0-NA"},{"introduced":"8.0.0-rc0"},{"last_affected":"8.0.0-rc0"},{"introduced":"8.0.0-rc1"},{"last_affected":"8.0.0-rc1"},{"introduced":"8.0.0-rc2"},{"last_affected":"8.0.0-rc2"},{"introduced":"8.0.0-rc3"},{"last_affected":"8.0.0-rc3"},{"introduced":"8.0.0-rc4"},{"last_affected":"8.0.0-rc4"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["8.0.0-NA","8.0.0-rc0","8.0.0-rc1","8.0.0-rc2","8.0.0-rc3","8.0.0-rc4","v7.2.2","staging-mjt-test","v8.0.0-rc4","v8.0.0-rc3","v7.2.1","v8.0.0-rc2","v7.2.0","v8.0.0-rc1","v8.0.0-rc0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-0330.json"}},{"ranges":[{"type":"GIT","repo":"https://gitlab.com/qemu-project/qemu","events":[{"introduced":"b67b00e6b4c7831a3f5bc684bc0df7a9bfd1bd56"},{"fixed":"a8f7a3504dd30f760e3f07577a7e3f0554d538ea"},{"introduced":"c1eb2ddf0f8075faddc5f7c3d39feae3e8e9d6b4"},{"last_affected":"7dbd6f8a27e30fe14adb3d5869097cddf24038d6"}],"database_specific":{"cpe":["cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","cpe:2.3:a:qemu:qemu:8.0.0:-:*:*:*:*:*:*","cpe:2.3:a:qemu:qemu:8.0.0:rc0:*:*:*:*:*:*","cpe:2.3:a:qemu:qemu:8.0.0:rc1:*:*:*:*:*:*","cpe:2.3:a:qemu:qemu:8.0.0:rc2:*:*:*:*:*:*","cpe:2.3:a:qemu:qemu:8.0.0:rc3:*:*:*:*:*:*","cpe:2.3:a:qemu:qemu:8.0.0:rc4:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.2.0"},{"fixed":"7.2.3"},{"introduced":"8.0.0-NA"},{"last_affected":"8.0.0-NA"},{"introduced":"8.0.0-rc0"},{"last_affected":"8.0.0-rc0"},{"introduced":"8.0.0-rc1"},{"last_affected":"8.0.0-rc1"},{"introduced":"8.0.0-rc2"},{"last_affected":"8.0.0-rc2"},{"introduced":"8.0.0-rc3"},{"last_affected":"8.0.0-rc3"},{"introduced":"8.0.0-rc4"},{"last_affected":"8.0.0-rc4"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["8.0.0-NA","8.0.0-rc0","8.0.0-rc1","8.0.0-rc2","8.0.0-rc3","8.0.0-rc4","v7.2.2","v8.0.0-rc4","v8.0.0-rc3","v7.2.1","v8.0.0-rc2","v7.2.0","v8.0.0-rc1","v8.0.0-rc0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-0330.json"}}],"references":[{"type":"WEB","url":"https://lists.nongnu.org/archive/html/qemu-devel/2023-01/msg03411.html"},{"type":"ADVISORY","url":"https://access.redhat.com/security/cve/CVE-2023-0330"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0330.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0330"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160151"},{"type":"PACKAGE","url":"https://gitlab.com/qemu-project/qemu"},{"type":"ARTICLE","url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00006.html"}],"database_specific":{"cna_assigner":"fedora","cwe_ids":["CWE-121"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0330.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H"}]}