{"schema_version":"1.9.0","id":"CVE-2023-2700","published":"2023-05-15T00:00:00Z","modified":"2026-08-12T08:20:11.529614Z","related":["ALSA-2023:3715","ALSA-2023:3822","SUSE-SU-2023:2356-1","SUSE-SU-2023:2652-1","openSUSE-SU-2024:14490-1"],"details":"A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's g_autoptr cleanup.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/libvirt/libvirt","events":[{"introduced":"6a32f5b89df4d9b9d33e82afa59fbe0a77e1edab"},{"last_affected":"6a32f5b89df4d9b9d33e82afa59fbe0a77e1edab"}],"database_specific":{"cpe":"cpe:2.3:a:redhat:libvirt:4.5.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"4.5.0"},{"last_affected":"4.5.0"}],"source":"CPE_STRING"}},{"type":"GIT","repo":"https://gitlab.com/libvirt/libvirt","events":[{"introduced":"6a32f5b89df4d9b9d33e82afa59fbe0a77e1edab"},{"fixed":"6425a311b8ad19d6f9c0b315bf1d722551ea3585"}],"database_specific":{"cpe":"cpe:2.3:a:redhat:libvirt:4.5.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"4.5.0"},{"last_affected":"4.5.0"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["4.5.0","libvirt-4.5.0","v4.5.0","v9.3.0-rc2","v9.3.0-rc1","v9.2.0","v9.2.0-rc2","v9.2.0-rc1","v9.1.0","v9.1.0-rc2","v9.1.0-rc1","v9.0.0","v9.0.0-rc2","v9.0.0-rc1","v8.10.0","v8.10.0-rc2","v8.10.0-rc1","v8.9.0","v8.9.0-rc2","v8.9.0-rc1","v8.8.0","v8.8.0-rc2","v8.8.0-rc1","v8.7.0","v8.7.0-rc2","v8.7.0-rc1","v8.6.0","v8.6.0-rc2","v8.6.0-rc1","v8.5.0","v8.5.0-rc2","v8.5.0-rc1","v8.4.0","v8.4.0-rc2","v8.4.0-rc1","v8.3.0","v8.3.0-rc2","v8.3.0-rc1","v8.2.0","v8.2.0-rc2","v8.2.0-rc1","CVE-2022-0897","v8.1.0","v8.1.0-rc2","v8.1.0-rc1","v8.0.0","v8.0.0-rc2","v8.0.0-rc1","v7.10.0","v7.10.0-rc2","v7.10.0-rc1","v7.9.0","v7.9.0-rc2","v7.9.0-rc1","v7.8.0","v7.8.0-rc2","v7.8.0-rc1","v7.7.0","v7.7.0-rc2","v7.7.0-rc1","v7.6.0","v7.6.0-rc2","v7.6.0-rc1","CVE-2021-3667","v7.5.0","CVE-2021-3631","v7.5.0-rc2","v7.5.0-rc1","v7.4.0","v7.4.0-rc2","v7.4.0-rc1","v7.3.0","v7.3.0-rc2","v7.3.0-rc1","v7.2.0","v7.2.0-rc2","v7.2.0-rc1","v7.1.0","v7.1.0-rc2","v7.1.0-rc1","v7.0.0","v7.0.0-rc2","v7.0.0-rc1","v6.10.0","v6.10.0-rc2","v6.10.0-rc1","v6.9.0","v6.9.0-rc2","v6.9.0-rc1","v6.8.0","CVE-2020-25637","v6.8.0-rc2","v6.8.0-rc1","v6.7.0","v6.7.0-rc2","v6.7.0-rc1","v6.6.0","CVE-2020-14339","v6.6.0-rc1","v6.5.0","v6.5.0-rc2","v6.5.0-rc1","v6.4.0","v6.4.0-rc1","v6.3.0","v6.3.0-rc1","v6.2.0","v6.2.0-rc1","v6.1.0","v6.1.0-rc2","v6.1.0-rc1","v6.0.0","v6.0.0-rc2","v6.0.0-rc1","v5.10.0","v5.10.0-rc2","v5.10.0-rc1","v5.9.0","v5.9.0-rc1","v5.8.0","v5.8.0-rc2","v5.8.0-rc1","v5.7.0","v5.7.0-rc2","v5.7.0-rc1","v5.6.0","v5.6.0-rc2","v5.6.0-rc1","v5.5.0","v5.5.0-rc2","v5.5.0-rc1","CVE-2019-10168","CVE-2019-10161","CVE-2019-10166","CVE-2019-10167","v5.4.0","v5.4.0-rc2","v5.4.0-rc1","v4.6.0","v4.8.0","v4.9.0","v4.10.0","v5.0.0","v5.2.0","CVE-2019-10132","v5.3.0","v4.7.0","v5.3.0-rc2","v5.3.0-rc1","CVE-2019-3886","v5.2.0-rc2","v5.2.0-rc1","v5.1.0","v5.1.0-rc2","v5.1.0-rc1","v5.0.0-rc2","v5.0.0-rc1","v4.10.0-rc2","v4.10.0-rc1","v4.9.0-rc1","v4.8.0-rc2","v4.8.0-rc1","v4.7.0-rc2","v4.7.0-rc1","v4.6.0-rc2","v4.6.0-rc1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-2700.json","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["291082606852247192441890115716468184656","16831957577810862612064145808021769204","80407383512522332122355084597981728215"],"threshold":0.9},"id":"CVE-2023-2700-3a96a97a","signature_type":"Line","signature_version":"v1","source":"https://gitlab.com/libvirt/libvirt@6425a311b8ad19d6f9c0b315bf1d722551ea3585","target":{"file":"src/util/virpci.c"}},{"deprecated":false,"digest":{"function_hash":"128985930182926183113986912607142045219","length":250},"id":"CVE-2023-2700-ae04aff4","signature_type":"Function","signature_version":"v1","source":"https://gitlab.com/libvirt/libvirt@6425a311b8ad19d6f9c0b315bf1d722551ea3585","target":{"file":"src/util/virpci.c","function":"virPCIVirtualFunctionListFree"}}],"vanir_signatures_modified":"2026-08-12T08:20:11Z"}}],"references":[{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2023-2700"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2700.json"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EVK6JKP36CHE7YAFDJNPNLTW4OWJJ7TQ/"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2700"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20230706-0001/"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2203653"},{"type":"FIX","url":"https://gitlab.com/libvirt/libvirt/-/commit/6425a311b8ad19d6f9c0b315bf1d722551ea3585#874a1e768ade6ceb4538931cbc06248e73223306"}],"database_specific":{"cna_assigner":"redhat","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2700.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}