CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-3812

QEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the hw/i2c/i2c-ddc.c:i2c_ddc() function. A local attacker with permission to execute i2c commands could exploit this to read stack memory of the qemu process on the host.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 24.0%

CVSS Severity

CVSS v3 Score 4.4

CVSS v2 Score 2.1

References

Products affected by CVE-2019-3812

Qemu » Qemu » Version: 2.10.0

cpe:2.3:a:qemu:qemu:2.10.0
Qemu » Qemu » Version: 2.10.1

cpe:2.3:a:qemu:qemu:2.10.1
Qemu » Qemu » Version: 2.10.2

cpe:2.3:a:qemu:qemu:2.10.2
Qemu » Qemu » Version: 2.11.0

cpe:2.3:a:qemu:qemu:2.11.0
Qemu » Qemu » Version: 2.11.1

cpe:2.3:a:qemu:qemu:2.11.1
Qemu » Qemu » Version: 2.11.2

cpe:2.3:a:qemu:qemu:2.11.2
Qemu » Qemu » Version: 2.12.0

cpe:2.3:a:qemu:qemu:2.12.0
Qemu » Qemu » Version: 2.12.1

cpe:2.3:a:qemu:qemu:2.12.1
Qemu » Qemu » Version: 2.12.50

cpe:2.3:a:qemu:qemu:2.12.50
Qemu » Qemu » Version: 2.17.2

cpe:2.3:a:qemu:qemu:2.17.2
Qemu » Qemu » Version: 3.0.0

cpe:2.3:a:qemu:qemu:3.0.0
Qemu » Qemu » Version: 3.0.1

cpe:2.3:a:qemu:qemu:3.0.1
Qemu » Qemu » Version: 3.1

cpe:2.3:a:qemu:qemu:3.1
Qemu » Qemu » Version: 3.1.0

cpe:2.3:a:qemu:qemu:3.1.0
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 18.10

cpe:2.3:o:canonical:ubuntu_linux:18.10
Fedoraproject » Fedora » Version: 29

cpe:2.3:o:fedoraproject:fedora:29
Fedoraproject » Fedora » Version: 30

cpe:2.3:o:fedoraproject:fedora:30
Opensuse » Leap » Version: 42.3

cpe:2.3:o:opensuse:leap:42.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-3812

Products

Pricing

Contact Us