Description
QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable
References (4)
Core 4
Core References
Mailing List, Patch, Third Party Advisory x_refsource_misc
https://lists.gnu.org/archive/html/qemu-devel/2019-05/msg04596.html
Mailing List, Patch, Third Party Advisory x_refsource_misc
https://lists.gnu.org/archive/html/qemu-devel/2019-01/msg06360.html
Third Party Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/108434
Various Sources x_refsource_misc
https://lists.gnu.org/archive/html/qemu-devel/2019-05/msg05457.html
Scores
CVSS v3
7.5
EPSS
0.0052
EPSS Percentile
67.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-190
Status
published
Products (1)
qemu/qemu
3.0.0
Published
May 22, 2019
Tracked Since
Feb 18, 2026