Wind River Support Network

HomeDefectsLIN8-11017

Fixed

LIN8-11017 : Security Advisory - qemu - CVE-2019-9824

Created: Jun 11, 2019 Updated: Aug 21, 2019

Resolved Date: Jul 16, 2019

Found In Version: 8.0.0.1

Fix Version: 8.0.0.31

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Userspace

Description

tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.

CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2019-9824 User=admin}

CVEs

CVE-2019-9824