NetSight
IP …
high7.5

CVE-2019-12247

QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables.

Impact

QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable

Affected products

VendorProductAffected versions
QemuQemu
Version 3.0.0

Weakness classification

CWE-190

References