CVE-2019-12247
No fix known EPSS 3%
QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable
Products: qemu
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | qemu | no fix |
| Debian 13 | qemu | no fix |
| Debian 14 | qemu | no fix |
| Ubuntu Pro 14.04 LTS | qemu | no fix |
| Ubuntu Pro 16.04 LTS | qemu | no fix |
| Ubuntu Pro 18.04 LTS | qemu | no fix |