CVE-2023-2700

A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's g_autoptr cleanup.

• CWE-401
• CWE-401

• https://access.redhat.com/security/cve/CVE-2023-2700Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2203653Issue Tracking, Vendor Advisory
• https://gitlab.com/libvirt/libvirt/-/commit/6425a311b8ad19d6f9c0b315bf1d722551ea3585#874a1e768ade6ceb4538931cbc06248e73223306Patch
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EVK6JKP36CHE7YAFDJNPNLTW4OWJJ7TQ/
• https://security.netapp.com/advisory/ntap-20230706-0001/
• https://access.redhat.com/security/cve/CVE-2023-2700Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2203653Issue Tracking, Vendor Advisory
• https://gitlab.com/libvirt/libvirt/-/commit/6425a311b8ad19d6f9c0b315bf1d722551ea3585#874a1e768ade6ceb4538931cbc06248e73223306Patch
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EVK6JKP36CHE7YAFDJNPNLTW4OWJJ7TQ/
• https://security.netapp.com/advisory/ntap-20230706-0001/

Published

May 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26986An issue in China Mobile OA Mailbox PC v2.9.23 allows remote…7.8
• CVE-2023-26987An issue discovered in Konga 0.14.9 allows remote attackers …6.5
• CVE-2023-2699A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-26991SWFTools v0.9.2 was discovered to contain a stack-use-after-…7.8
• CVE-2023-26998Cross Site Scripting vulnerability found in NetScoutnGeniusO…5.4
• CVE-2023-26999An issue found in NetScout nGeniusOne v.6.3.4 allows a remot…9.8
• CVE-2023-27000Cross Site Scripting vulnerability found in NetScoutnGeniusO…6.1
• CVE-2023-27001An issue discovered in Egerie Risk Manager v4.0.5 allows att…8.8
• CVE-2023-27008A Cross-site scripting (XSS) vulnerability in the function e…6.1
• CVE-2023-2701The Gravity Forms WordPress plugin before 2.7.5 does not esc…6.1
• CVE-2023-27010Wondershare Dr.Fone v12.9.6 was discovered to contain weak p…7.8
• CVE-2023-27012Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to c…9.8