CVE-2019-12247
QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
За последние 30 дней в qemu опубликовано уязвимостей: 7; в каталоге KEV: 0.
Уязвимостей: 83
QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable
hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model system attributes with a guest.
The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.