Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-12247

No fix known EPSS 3%

QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable

Published 2019-05-22 · CVE record · OSV

Products: qemu

Distro releases

ReleasePackageFixed in
Debian 12qemuno fix
Debian 13qemuno fix
Debian 14qemuno fix
Ubuntu Pro 14.04 LTSqemuno fix
Ubuntu Pro 16.04 LTSqemuno fix
Ubuntu Pro 18.04 LTSqemuno fix