{"id":"CVE-2019-12247","aliases":["DEBIAN-CVE-2019-12247","EUVD-2019-3889","GHSA-rpv4-4xh7-p4f6","UBUNTU-CVE-2019-12247"],"status":"disputed","title":"QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of...","description":"QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02957,"percentile":0.8729,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-190"],"published":"2019-05-22T14:22:54Z","modified":"2026-10-24T10:30:36Z","affected":[{"source":"osv","ecosystem":"Debian:12","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.0.0+ds-1","1:10.0.0+ds-2","1:10.0.0+ds-2~bpo12+1","1:10.0.0+ds-2~bpo12+2","1:10.0.0~rc0+ds-1","1:10.0.0~rc0+ds-2","1:10.0.0~rc1+ds-1","1:10.0.0~rc1+ds-2","1:10.0.0~rc2+ds-1","1:10.0.0~rc2+ds-2","1:10.0.0~rc3+ds-1","1:10.0.0~rc3+ds-2","1:10.0.2+ds-1","1:10.0.2+ds-2","1:10.0.2+ds-2~bpo12+1","1:10.0.3+ds-1","1:10.0.3+ds-2","1:10.0.3+ds-3","1:10.0.3+ds-4","1:10.1.0+ds-1","1:10.1.0+ds-2","1:10.1.0+ds-3","1:10.1.0+ds-4","1:10.1.0+ds-5","1:10.1.0~rc0+ds-1","1:10.1.0~rc0+ds-2","1:10.1.0~rc0+ds-3","1:10.1.0~rc0+ds-4","1:10.1.0~rc1+ds-1","1:10.1.0~rc1+ds-1a","1:10.1.0~rc1+ds-1b","1:10.1.0~rc1+ds-2","1:10.1.0~rc1+ds-3","1:10.1.0~rc2+ds-1","1:10.1.0~rc3+ds-1","1:10.1.0~rc3+ds-2","1:10.1.1+ds-1","1:10.1.2+ds-1","1:10.1.2+ds-2","1:10.1.2+ds-3","1:10.1.3+ds-1","1:10.2.0+ds-1","1:10.2.0+ds-2","1:10.2.0~rc1+ds-1","1:10.2.1+ds-1","1:10.2.2+ds-1","1:11.0.0+ds-1","1:11.0.0+ds-2","1:11.0.0~rc0+ds-1","1:11.0.0~rc0+ds-2","1:11.0.0~rc1+ds-1","1:11.0.0~rc1+ds-2","1:11.0.0~rc1+ds-3","1:11.0.0~rc2+ds-1","1:11.0.0~rc2+ds-2","1:11.0.0~rc3+ds-1","1:11.0.1+ds-1","1:11.0.2+ds-1","1:11.0.2+ds-2","1:11.0.2+ds-2~bpo13+1","1:11.0.3+ds-1","1:11.0.3+ds-2","1:11.1.0+ds-1","1:11.1.0+ds-2","1:11.1.0~rc0+ds-1","1:11.1.0~rc0+ds-2","1:11.1.0~rc1+ds-1","1:11.1.0~rc3+ds-1","1:11.1.0~rc3+ds-2","1:11.1.1+ds-1","1:7.2+dfsg-7","1:7.2+dfsg-7+deb12u1","1:7.2+dfsg-7+deb12u10","1:7.2+dfsg-7+deb12u11","1:7.2+dfsg-7+deb12u12","1:7.2+dfsg-7+deb12u13","1:7.2+dfsg-7+deb12u14","1:7.2+dfsg-7+deb12u15","1:7.2+dfsg-7+deb12u16","1:7.2+dfsg-7+deb12u17","1:7.2+dfsg-7+deb12u18","1:7.2+dfsg-7+deb12u2","1:7.2+dfsg-7+deb12u2~bpo11+1","1:7.2+dfsg-7+deb12u3","1:7.2+dfsg-7+deb12u4","1:7.2+dfsg-7+deb12u5","1:7.2+dfsg-7+deb12u6","1:7.2+dfsg-7+deb12u7","1:7.2+dfsg-7+deb12u8","1:7.2+dfsg-7+deb12u9","1:8.0+dfsg-1","1:8.0+dfsg-2","1:8.0+dfsg-3","1:8.0+dfsg-4","1:8.0.2+dfsg-1","1:8.0.2+dfsg-2","1:8.0.2+dfsg-3","1:8.0.3+dfsg-1","1:8.0.3+dfsg-1~bpo12+1","1:8.0.3+dfsg-2","1:8.0.3+dfsg-3","1:8.0.3+dfsg-4","1:8.0.3+dfsg-5","1:8.0.4+dfsg-1","1:8.0.4+dfsg-1~bpo12+1","1:8.0.4+dfsg-2","1:8.0.4+dfsg-3","1:8.0~rc2+dfsg-1","1:8.0~rc3+dfsg-1","1:8.0~rc3+dfsg-2","1:8.0~rc4+dfsg-1","1:8.0~rc4+dfsg-2","1:8.1.0+ds-1","1:8.1.0+ds-1~exp1","1:8.1.0+ds-1~exp2","1:8.1.0+ds-2","1:8.1.0+ds-3","1:8.1.0+ds-4","1:8.1.0+ds-5","1:8.1.0+ds-6","1:8.1.0~rc2+dfsg-1","1:8.1.0~rc3+dfsg-1","1:8.1.0~rc3+dfsg-2","1:8.1.0~rc4+ds-1","1:8.1.0~rc4+ds-2","1:8.1.0~rc4+ds-3","1:8.1.0~rc4+ds-4","1:8.1.1+ds-1","1:8.1.1+ds-2","1:8.1.1+ds-2~bpo12+1","1:8.1.2+ds-1","1:8.1.2+ds-1~bpo12+1","1:8.1.3+ds-1","1:8.2.0+ds-1","1:8.2.0+ds-2","1:8.2.0+ds-3","1:8.2.0+ds-4","1:8.2.0+ds-5","1:8.2.0+ds-5~bpo12+1","1:8.2.0~rc0+ds-1","1:8.2.0~rc1+ds-1","1:8.2.0~rc2+ds-1","1:8.2.1+ds-1","1:8.2.1+ds-1~bpo12+1","1:8.2.1+ds-2","1:8.2.2+ds-1","1:8.2.2+ds-2","1:8.2.3+ds-1","1:8.2.3+ds-2","1:8.2.4+ds-1","1:8.2.4+ds-2","1:8.2.5+ds-1","1:8.2.5+ds-2","1:9.0.0~rc0+ds-1","1:9.0.0~rc0+ds-2","1:9.0.0~rc2+ds-1","1:9.0.1+ds-1","1:9.0.1+ds-1~bpo12+1","1:9.0.2+ds-1","1:9.0.2+ds-1~bpo12+1","1:9.0.2+ds-2","1:9.0.2+ds-3","1:9.0.2+ds-4","1:9.0.2+ds-5","1:9.0.2+ds-6","1:9.0.2+ds-7","1:9.1.0+ds-1","1:9.1.0+ds-2","1:9.1.0+ds-3","1:9.1.0+ds-4","1:9.1.0+ds-5","1:9.1.0+ds-6","1:9.1.0+ds-7","1:9.1.0+ds-8","1:9.1.0+ds-9~exp0","1:9.1.0~rc0+ds-1","1:9.1.0~rc0+ds-2","1:9.1.0~rc0+ds-3","1:9.1.1+ds-1","1:9.1.1+ds-2","1:9.1.1+ds-2~bpo12+1","1:9.1.1+ds-3","1:9.1.1+ds-4","1:9.1.1+ds-5","1:9.1.2+ds-1","1:9.1.2+ds-1~bpo12+1","1:9.2.0+ds-1","1:9.2.0+ds-1~exp1","1:9.2.0+ds-2","1:9.2.0+ds-3","1:9.2.0+ds-3~bpo12+1","1:9.2.0+ds-3~bpo12+2","1:9.2.0+ds-4","1:9.2.0+ds-5","1:9.2.0~rc0+ds-1","1:9.2.0~rc3+ds-1","1:9.2.1+ds-1","1:9.2.2+ds-1","1:9.2.2+ds-1~bpo12+1"]},{"source":"osv","ecosystem":"Debian:13","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.0.10+ds-0+deb13u1","1:10.0.11+ds-0+deb13u1","1:10.0.13+ds-0+deb13u1","1:10.0.2+ds-2","1:10.0.2+ds-2+deb13u1","1:10.0.2+ds-2+deb13u1~bpo12+1","1:10.0.3+ds-0+deb13u1","1:10.0.3+ds-1","1:10.0.3+ds-2","1:10.0.3+ds-3","1:10.0.3+ds-4","1:10.0.6+ds-0+deb13u1","1:10.0.6+ds-0+deb13u2","1:10.0.7+ds-0+deb13u1","1:10.0.8+ds-0+deb13u1","1:10.1.0+ds-1","1:10.1.0+ds-2","1:10.1.0+ds-3","1:10.1.0+ds-4","1:10.1.0+ds-5","1:10.1.0~rc0+ds-1","1:10.1.0~rc0+ds-2","1:10.1.0~rc0+ds-3","1:10.1.0~rc0+ds-4","1:10.1.0~rc1+ds-1","1:10.1.0~rc1+ds-1a","1:10.1.0~rc1+ds-1b","1:10.1.0~rc1+ds-2","1:10.1.0~rc1+ds-3","1:10.1.0~rc2+ds-1","1:10.1.0~rc3+ds-1","1:10.1.0~rc3+ds-2","1:10.1.1+ds-1","1:10.1.2+ds-1","1:10.1.2+ds-2","1:10.1.2+ds-3","1:10.1.3+ds-1","1:10.2.0+ds-1","1:10.2.0+ds-2","1:10.2.0~rc1+ds-1","1:10.2.1+ds-1","1:10.2.2+ds-1","1:11.0.0+ds-1","1:11.0.0+ds-2","1:11.0.0~rc0+ds-1","1:11.0.0~rc0+ds-2","1:11.0.0~rc1+ds-1","1:11.0.0~rc1+ds-2","1:11.0.0~rc1+ds-3","1:11.0.0~rc2+ds-1","1:11.0.0~rc2+ds-2","1:11.0.0~rc3+ds-1","1:11.0.1+ds-1","1:11.0.2+ds-1","1:11.0.2+ds-2","1:11.0.2+ds-2~bpo13+1","1:11.0.3+ds-1","1:11.0.3+ds-2","1:11.1.0+ds-1","1:11.1.0+ds-2","1:11.1.0~rc0+ds-1","1:11.1.0~rc0+ds-2","1:11.1.0~rc1+ds-1","1:11.1.0~rc3+ds-1","1:11.1.0~rc3+ds-2","1:11.1.1+ds-1"]},{"source":"osv","ecosystem":"Debian:14","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.0.2+ds-2","1:10.0.3+ds-1","1:10.0.3+ds-2","1:10.0.3+ds-3","1:10.0.3+ds-4","1:10.1.0+ds-1","1:10.1.0+ds-2","1:10.1.0+ds-3","1:10.1.0+ds-4","1:10.1.0+ds-5","1:10.1.0~rc0+ds-1","1:10.1.0~rc0+ds-2","1:10.1.0~rc0+ds-3","1:10.1.0~rc0+ds-4","1:10.1.0~rc1+ds-1","1:10.1.0~rc1+ds-1a","1:10.1.0~rc1+ds-1b","1:10.1.0~rc1+ds-2","1:10.1.0~rc1+ds-3","1:10.1.0~rc2+ds-1","1:10.1.0~rc3+ds-1","1:10.1.0~rc3+ds-2","1:10.1.1+ds-1","1:10.1.2+ds-1","1:10.1.2+ds-2","1:10.1.2+ds-3","1:10.1.3+ds-1","1:10.2.0+ds-1","1:10.2.0+ds-2","1:10.2.0~rc1+ds-1","1:10.2.1+ds-1","1:10.2.2+ds-1","1:11.0.0+ds-1","1:11.0.0+ds-2","1:11.0.0~rc0+ds-1","1:11.0.0~rc0+ds-2","1:11.0.0~rc1+ds-1","1:11.0.0~rc1+ds-2","1:11.0.0~rc1+ds-3","1:11.0.0~rc2+ds-1","1:11.0.0~rc2+ds-2","1:11.0.0~rc3+ds-1","1:11.0.1+ds-1","1:11.0.2+ds-1","1:11.0.2+ds-2","1:11.0.2+ds-2~bpo13+1","1:11.0.3+ds-1","1:11.0.3+ds-2","1:11.1.0+ds-1","1:11.1.0+ds-2","1:11.1.0~rc0+ds-1","1:11.1.0~rc0+ds-2","1:11.1.0~rc1+ds-1","1:11.1.0~rc3+ds-1","1:11.1.0~rc3+ds-2","1:11.1.1+ds-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.0+dfsg-3ubuntu5","1.5.0+dfsg-3ubuntu6","1.6.0+dfsg-2ubuntu1","1.6.0+dfsg-2ubuntu2","1.6.0+dfsg-2ubuntu3","1.6.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu1","1.7.0+dfsg-2ubuntu2","1.7.0+dfsg-2ubuntu3","1.7.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu5","1.7.0+dfsg-2ubuntu7","1.7.0+dfsg-2ubuntu8","1.7.0+dfsg-2ubuntu9","1.7.0+dfsg-3ubuntu1~ppa1","1.7.0+dfsg-3ubuntu1","1.7.0+dfsg-3ubuntu2","1.7.0+dfsg-3ubuntu3","1.7.0+dfsg-3ubuntu4","1.7.0+dfsg-3ubuntu5","1.7.0+dfsg-3ubuntu6","1.7.0+dfsg-3ubuntu7","2.0.0~rc1+dfsg-0ubuntu1","2.0.0~rc1+dfsg-0ubuntu2","2.0.0~rc1+dfsg-0ubuntu3","2.0.0~rc1+dfsg-0ubuntu3.1","2.0.0+dfsg-2ubuntu1","2.0.0+dfsg-2ubuntu1.1","2.0.0+dfsg-2ubuntu1.2","2.0.0+dfsg-2ubuntu1.3","2.0.0+dfsg-2ubuntu1.5","2.0.0+dfsg-2ubuntu1.6","2.0.0+dfsg-2ubuntu1.7","2.0.0+dfsg-2ubuntu1.8","2.0.0+dfsg-2ubuntu1.9","2.0.0+dfsg-2ubuntu1.10","2.0.0+dfsg-2ubuntu1.11","2.0.0+dfsg-2ubuntu1.13","2.0.0+dfsg-2ubuntu1.14","2.0.0+dfsg-2ubuntu1.15","2.0.0+dfsg-2ubuntu1.16","2.0.0+dfsg-2ubuntu1.17","2.0.0+dfsg-2ubuntu1.18","2.0.0+dfsg-2ubuntu1.19","2.0.0+dfsg-2ubuntu1.20","2.0.0+dfsg-2ubuntu1.21","2.0.0+dfsg-2ubuntu1.22","2.0.0+dfsg-2ubuntu1.24","2.0.0+dfsg-2ubuntu1.25","2.0.0+dfsg-2ubuntu1.26","2.0.0+dfsg-2ubuntu1.27","2.0.0+dfsg-2ubuntu1.28","2.0.0+dfsg-2ubuntu1.29","2.0.0+dfsg-2ubuntu1.30","2.0.0+dfsg-2ubuntu1.31","2.0.0+dfsg-2ubuntu1.32","2.0.0+dfsg-2ubuntu1.33","2.0.0+dfsg-2ubuntu1.34","2.0.0+dfsg-2ubuntu1.35","2.0.0+dfsg-2ubuntu1.36","2.0.0+dfsg-2ubuntu1.38","2.0.0+dfsg-2ubuntu1.39","2.0.0+dfsg-2ubuntu1.40","2.0.0+dfsg-2ubuntu1.41","2.0.0+dfsg-2ubuntu1.42","2.0.0+dfsg-2ubuntu1.43","2.0.0+dfsg-2ubuntu1.44","2.0.0+dfsg-2ubuntu1.45","2.0.0+dfsg-2ubuntu1.46","2.0.0+dfsg-2ubuntu1.47","2.0.0+dfsg-2ubuntu1.47+esm1","2.0.0+dfsg-2ubuntu1.47+esm2","2.0.0+dfsg-2ubuntu1.47+esm3","2.0.0+dfsg-2ubuntu1.47+esm4","2.0.0+dfsg-2ubuntu1.47+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.3+dfsg-5ubuntu9","1:2.3+dfsg-5ubuntu10","1:2.4+dfsg-4ubuntu1","1:2.4+dfsg-4ubuntu2","1:2.4+dfsg-4ubuntu3","1:2.4+dfsg-5ubuntu3","1:2.5+dfsg-1ubuntu2","1:2.5+dfsg-1ubuntu3","1:2.5+dfsg-1ubuntu4","1:2.5+dfsg-1ubuntu5","1:2.5+dfsg-5ubuntu1","1:2.5+dfsg-5ubuntu2","1:2.5+dfsg-5ubuntu4","1:2.5+dfsg-5ubuntu6","1:2.5+dfsg-5ubuntu7","1:2.5+dfsg-5ubuntu10","1:2.5+dfsg-5ubuntu10.1","1:2.5+dfsg-5ubuntu10.2","1:2.5+dfsg-5ubuntu10.3","1:2.5+dfsg-5ubuntu10.4","1:2.5+dfsg-5ubuntu10.5","1:2.5+dfsg-5ubuntu10.6","1:2.5+dfsg-5ubuntu10.7","1:2.5+dfsg-5ubuntu10.8","1:2.5+dfsg-5ubuntu10.9","1:2.5+dfsg-5ubuntu10.10","1:2.5+dfsg-5ubuntu10.11","1:2.5+dfsg-5ubuntu10.13","1:2.5+dfsg-5ubuntu10.14","1:2.5+dfsg-5ubuntu10.15","1:2.5+dfsg-5ubuntu10.16","1:2.5+dfsg-5ubuntu10.20","1:2.5+dfsg-5ubuntu10.21","1:2.5+dfsg-5ubuntu10.22","1:2.5+dfsg-5ubuntu10.24","1:2.5+dfsg-5ubuntu10.25","1:2.5+dfsg-5ubuntu10.26","1:2.5+dfsg-5ubuntu10.28","1:2.5+dfsg-5ubuntu10.29","1:2.5+dfsg-5ubuntu10.30","1:2.5+dfsg-5ubuntu10.31","1:2.5+dfsg-5ubuntu10.32","1:2.5+dfsg-5ubuntu10.33","1:2.5+dfsg-5ubuntu10.34","1:2.5+dfsg-5ubuntu10.35","1:2.5+dfsg-5ubuntu10.36","1:2.5+dfsg-5ubuntu10.37","1:2.5+dfsg-5ubuntu10.38","1:2.5+dfsg-5ubuntu10.39","1:2.5+dfsg-5ubuntu10.40","1:2.5+dfsg-5ubuntu10.41","1:2.5+dfsg-5ubuntu10.42","1:2.5+dfsg-5ubuntu10.43","1:2.5+dfsg-5ubuntu10.44","1:2.5+dfsg-5ubuntu10.45","1:2.5+dfsg-5ubuntu10.46","1:2.5+dfsg-5ubuntu10.47","1:2.5+dfsg-5ubuntu10.48","1:2.5+dfsg-5ubuntu10.49","1:2.5+dfsg-5ubuntu10.51","1:2.5+dfsg-5ubuntu10.51+esm1","1:2.5+dfsg-5ubuntu10.51+esm2","1:2.5+dfsg-5ubuntu10.51+esm3","1:2.5+dfsg-5ubuntu10.51+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.10+dfsg-0ubuntu3","1:2.10+dfsg-0ubuntu4","1:2.10+dfsg-0ubuntu5","1:2.11+dfsg-1ubuntu1","1:2.11+dfsg-1ubuntu2","1:2.11+dfsg-1ubuntu4","1:2.11+dfsg-1ubuntu5","1:2.11+dfsg-1ubuntu6","1:2.11+dfsg-1ubuntu7","1:2.11+dfsg-1ubuntu7.1","1:2.11+dfsg-1ubuntu7.2","1:2.11+dfsg-1ubuntu7.3","1:2.11+dfsg-1ubuntu7.4","1:2.11+dfsg-1ubuntu7.5","1:2.11+dfsg-1ubuntu7.6","1:2.11+dfsg-1ubuntu7.7","1:2.11+dfsg-1ubuntu7.8","1:2.11+dfsg-1ubuntu7.9","1:2.11+dfsg-1ubuntu7.10","1:2.11+dfsg-1ubuntu7.12","1:2.11+dfsg-1ubuntu7.13","1:2.11+dfsg-1ubuntu7.14","1:2.11+dfsg-1ubuntu7.15","1:2.11+dfsg-1ubuntu7.17","1:2.11+dfsg-1ubuntu7.18","1:2.11+dfsg-1ubuntu7.19","1:2.11+dfsg-1ubuntu7.20","1:2.11+dfsg-1ubuntu7.21","1:2.11+dfsg-1ubuntu7.22","1:2.11+dfsg-1ubuntu7.23","1:2.11+dfsg-1ubuntu7.25","1:2.11+dfsg-1ubuntu7.26","1:2.11+dfsg-1ubuntu7.27","1:2.11+dfsg-1ubuntu7.28","1:2.11+dfsg-1ubuntu7.29","1:2.11+dfsg-1ubuntu7.31","1:2.11+dfsg-1ubuntu7.32","1:2.11+dfsg-1ubuntu7.33","1:2.11+dfsg-1ubuntu7.34","1:2.11+dfsg-1ubuntu7.35","1:2.11+dfsg-1ubuntu7.36","1:2.11+dfsg-1ubuntu7.37","1:2.11+dfsg-1ubuntu7.38","1:2.11+dfsg-1ubuntu7.39","1:2.11+dfsg-1ubuntu7.40","1:2.11+dfsg-1ubuntu7.41","1:2.11+dfsg-1ubuntu7.42","1:2.11+dfsg-1ubuntu7.42+esm1","1:2.11+dfsg-1ubuntu7.42+esm2","1:2.11+dfsg-1ubuntu7.42+esm5","1:2.11+dfsg-1ubuntu7.42+esm6"]}],"products":[{"vendor":"qemu","product":"qemu"}],"references":[{"url":"https://lists.gnu.org/archive/html/qemu-devel/2019-05/msg04596.html","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2019-01/msg06360.html","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"http://www.securityfocus.com/bid/108434","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2019-05/msg05457.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12247"},{"url":"https://github.com/advisories/GHSA-rpv4-4xh7-p4f6"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-12247","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-12247","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12247","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-12247","description":"QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable","status":"disputed","published":"2019-05-22T14:22:54Z","modified":"2024-08-04T23:17:39.715Z","updated_at":"2026-11-02T14:20:24.025419Z"}],"euvd":[{"id":"EUVD-2019-3889","description":"QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable","status":"published","published":"2019-05-22T14:22:54Z","modified":"2024-08-04T23:17:39Z","updated_at":"2026-11-03T02:40:46.416719Z"}],"ghsa":[{"id":"GHSA-rpv4-4xh7-p4f6","title":"QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of...","description":"QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables.","status":"published","published":"2022-05-24T16:46:16Z","modified":"2024-03-21T03:33:38Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:55:41.504227Z"}],"nvd":[{"id":"CVE-2019-12247","description":"QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable","status":"disputed","published":"2019-05-22T15:29:03.277Z","modified":"2026-06-17T02:14:17.67Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:05:14.729983Z"}],"osv":[{"id":"CVE-2019-12247","description":"QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable","status":"published","published":"2019-05-22T15:29:03.277Z","modified":"2026-10-24T10:30:36.591467321Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:10.718934Z"},{"id":"DEBIAN-CVE-2019-12247","description":"QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable","status":"published","published":"2019-05-22T15:29:03.277Z","modified":"2026-09-21T07:01:47.012294459Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.467893Z"},{"id":"UBUNTU-CVE-2019-12247","description":"QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable","status":"published","published":"2019-05-22T15:29:00Z","modified":"2026-06-16T17:30:07.025315678Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:19.202697Z"}]}}