PT-2019-13028 · Qemu+2 · Qemu+2

Published 2019-06-24 · Updated 2024-08-05 · CVE-2019-12928

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions QEMU versions 4.0.0 and earlier

Description The QMP migrate command in QEMU is vulnerable to OS command injection, allowing a remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to the listening server. Note that this issue has been disputed as a non-issue since QEMU's -qmp interface is meant to be used by trusted users, and accessing this interface via a tcp socket open to the internet is considered an insecure configuration issue.

Recommendations For QEMU versions 4.0.0 and earlier, consider restricting access to the QMP interface to trusted users only, and avoid exposing the -qmp interface to the internet via a tcp socket. As a temporary workaround, consider disabling the QMP migrate command until a secure configuration can be implemented. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Exposure of Resource to Wrong Sphere

OS Command Injection

Weakness Enumeration

CWE-668

CWE-78

Related Identifiers

ALT-PU-2019-2496

ALT-PU-2019-2534

CVE-2019-12928

Affected Products

Alt Linux

Debian

Qemu

References · 23

• 🔥 https://fakhrizulkifli.github.io/posts/2019/06/05/CVE-2019-12928 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12929 · Security Note
• https://cve.org/CVERecord?id=CVE-2019-12928 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12155 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12928 · Security Note
• https://bdu.fstec.ru/vul/2021-05168 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13164 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-12928 · Security Note
• https://errata.altlinux.org/ALT-PU-2019-2496 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-12928 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-12928 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/qemu · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-12928 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-12928 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00700 · Security Note