VULNERABILITY INTELLIGENCE

CVE-2019-9824

CVSS score5.5 MEDIUM
EPSS probability0.52%
CISA KEVNot currently listed
Published2019-06-03
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.

Weakness classification

  • CWE-908: Use of Uninitialized Resource

Primary references