Wind River Support Network

HomeDefectsLIN1018-4248

Fixed

LIN1018-4248 : Security Advisory - qemu - CVE-2019-9824

Created: Jun 11, 2019 Updated: Jun 20, 2019

Resolved Date: Jun 20, 2019

Found In Version: 10.18.44.1

Fix Version: 10.18.44.8

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.

CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2019-9824 User=admin}

CVEs

CVE-2019-9824