Information Disclosure

2019-07-0800:07:09

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

33.3%

JSON

qemu-kvm is vulnerable to information disclosure. This is due to the tcp_emu function of the file slirp/tcp_subr.c. An attacker could use uninitialized data and the manipulation of unknown input may lead to a disclosure of information.

CPENameOperatorVersion
qemu-kvmeq1.5.3__156.el7_5.5
qemu-kvmeq0.12.1.2__2.160.el6_1.9
qemu-kvmeq0.12.1.2__2.209.el6_2.4
qemu-kvmeq0.12.1.2__2.160.el6_1.2
qemu-kvmeq0.12.1.2__2.491.el6_8.3
qemu-kvmeq1.5.3__156.el7_5.1
qemu-kvmeq0.12.1.2__2.355.el6_4.9
qemu-kvmeq1.5.3__156.el7_5.2
qemu-kvmeq0.12.1.2__2.209.el6_2.5
qemu-kvmeq0.12.1.2__2.415.el6_5.5

Name	Operator	Version
qemu-kvm	eq	1.5.3__156.el7_5.5
qemu-kvm	eq	0.12.1.2__2.160.el6_1.9
qemu-kvm	eq	0.12.1.2__2.209.el6_2.4
qemu-kvm	eq	0.12.1.2__2.160.el6_1.2
qemu-kvm	eq	0.12.1.2__2.491.el6_8.3
qemu-kvm	eq	1.5.3__156.el7_5.1
qemu-kvm	eq	0.12.1.2__2.355.el6_4.9
qemu-kvm	eq	1.5.3__156.el7_5.2
qemu-kvm	eq	0.12.1.2__2.209.el6_2.5
qemu-kvm	eq	0.12.1.2__2.415.el6_5.5