{"id":"CVE-2019-9824","details":"tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.","modified":"2026-08-18T13:28:18.759551Z","published":"2019-06-03T21:29:00.770Z","related":["ALSA-2019:3345","SUSE-SU-2019:0825-1","SUSE-SU-2019:0827-1","SUSE-SU-2019:0891-1","SUSE-SU-2019:0921-1","SUSE-SU-2019:1238-1","SUSE-SU-2019:1239-1","SUSE-SU-2019:1268-1","SUSE-SU-2019:1269-1","SUSE-SU-2019:1272-1","SUSE-SU-2019:14001-1","SUSE-SU-2019:14011-1","SUSE-SU-2019:14052-1","SUSE-SU-2019:14053-1","openSUSE-SU-2019:1405-1","openSUSE-SU-2024:11287-1"],"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVDHJB2QKXNDU7OFXIHIL5O5VN5QCSZL/"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:1650"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2078"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2425"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2553"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:3345"},{"type":"FIX","url":"https://lists.gnu.org/archive/html/qemu-devel/2019-03/msg00400.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/qemu/qemu","events":[{"introduced":"38441756b70eec5807b5f60dad11a93a91199866"},{"last_affected":"38441756b70eec5807b5f60dad11a93a91199866"}],"database_specific":{"cpe":"cpe:2.3:a:qemu:qemu:3.0.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"3.0.0"},{"last_affected":"3.0.0"}],"source":"CPE_STRING"}}],"versions":["3.0.0","v3.0.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-9824.json"}},{"ranges":[{"type":"GIT","repo":"https://gitlab.com/qemu-project/qemu","events":[{"introduced":"38441756b70eec5807b5f60dad11a93a91199866"},{"last_affected":"38441756b70eec5807b5f60dad11a93a91199866"}],"database_specific":{"cpe":"cpe:2.3:a:qemu:qemu:3.0.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"3.0.0"},{"last_affected":"3.0.0"}],"source":"CPE_STRING"}}],"versions":["3.0.0","v3.0.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-9824.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}]}