Qemu · Qemu · CVE-2019-13164
**Name of the Vulnerable Software and Affected Versions**
QEMU versions 3.1 through 4.0.0
**Description**
The issue is related to a security flaw in the `qemu-bridge-helper.c` function of the QEMU hardware emulator. This flaw can lead to an ACL bypass due to the lack of limitation on the network interface name size, which is obtained from `bridge.conf` or a `--br=bridge` option. The exploitation of this flaw may allow an attacker to gain unauthorized access to information, cause a denial of service, or impact the availability of information.
**Recommendations**
For QEMU versions 3.1 through 4.0.0, consider restricting access to the `qemu-bridge-helper.c` function until a patch is available. As a temporary workaround, limit the network interface name size to the `IFNAMSIZ` size to prevent potential ACL bypass. At the moment, there is no information about a newer version that contains a fix for this vulnerability.