Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2019-12247 →

DEBIAN-CVE-2019-12247

QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variabl...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 qemu

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 qemu

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 qemu

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Références

advisory security-tracker.debian.org