CVE-2023-1544

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of QEMU.

• CWE-125
• CWE-770

• https://access.redhat.com/security/cve/CVE-2023-1544
• https://bugzilla.redhat.com/show_bug.cgi?id=2180364Issue Tracking, Mailing List, Patch, Vendor Advisory
• https://lists.nongnu.org/archive/html/qemu-devel/2023-03/msg00206.htmlMailing List, Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230511-0005/
• https://access.redhat.com/security/cve/CVE-2023-1544
• https://bugzilla.redhat.com/show_bug.cgi?id=2180364Issue Tracking, Mailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2025/04/msg00042.html
• https://lists.nongnu.org/archive/html/qemu-devel/2023-03/msg00206.htmlMailing List, Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230511-0005/

Published

Mar 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1538Observable Timing Discrepancy in GitHub repository answerdev…5.3
• CVE-2023-1539Improper Restriction of Excessive Authentication Attempts in…5.3
• CVE-2023-1540Observable Response Discrepancy in GitHub repository answerd…5.3
• CVE-2023-1541Business Logic Errors in GitHub repository answerdev/answer …3.8
• CVE-2023-1542Business Logic Errors in GitHub repository answerdev/answer …5.4
• CVE-2023-1543Insufficient Session Expiration in GitHub repository answerd…8.8
• CVE-2023-1545SQL Injection in GitHub repository nilsteampassnet/teampass …7.5
• CVE-2023-1546The MyCryptoCheckout WordPress plugin before 2.124 does not …6.1
• CVE-2023-1547Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-1548 A CWE-269: Improper Privilege Management vulnerability exis…5.5
• CVE-2023-1549The Ad Inserter WordPress plugin before 2.7.27 unserializes …7.2
• CVE-2023-1550Insertion of Sensitive Information into log file vulnerabili…5.5