Lucene search

K
cvelistMitreCVELIST:CVE-2023-40360
HistoryAug 14, 2023 - 12:00 a.m.

CVE-2023-40360

2023-08-1400:00:00
mitre
www.cve.org
3
qemu
null pointer
nvme_directive_receive
endurance group
flexible data placement

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.5%

QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured before checking whether Flexible Data Placement is enabled.

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.5%