CVE-2019-12247

QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables

published May 22, 2019

CVSS
—
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02957 · 87.1th percentile
Published
2019-05-22T14:22Z
EPSS history
Timeline
  • 22 MAY 14:22Z
    QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables
    cvelistv5