Wind River Support Network

HomeDefectsLIN9-8617

Fixed

LIN9-8617 : Security Advisory - qemu - CVE-2019-9824

Created: Jun 11, 2019 Updated: Aug 15, 2019

Resolved Date: Jul 21, 2019

Found In Version: 9.0.0.1

Fix Version: 9.0.0.22

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.

CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2019-9824 User=admin}

CVEs

CVE-2019-9824