Lucene search

K
redhatcveRedhat.comRH:CVE-2019-13164
HistoryOct 27, 2019 - 6:29 p.m.

CVE-2019-13164

2019-10-2718:29:46
redhat.com
access.redhat.com
11

0.001 Low

EPSS

Percentile

24.3%

qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name (obtained from bridge.conf or a --br=bridge option) is limited to the IFNAMSIZ size, which can lead to an ACL bypass.

Mitigation

This flaw can only be exploited if /etc/qemu*/bridge.conf contains a line containing allow all or at least one line with a bridge name of at least 15 characters.