PT-2019-13029 · Qemu+2 · Qemu+2

Published 2019-06-24 · Updated 2024-08-05 · CVE-2019-12929

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions QEMU versions 4.0.0 and earlier

Description The QMP guest exec command in QEMU is prone to OS command injection, which allows the attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to the listening server. Note that this issue has been disputed as a non-issue since QEMU's -qmp interface is meant to be used by trusted users. If one is able to access this interface via a tcp socket open to the internet, then it is an insecure configuration issue.

Recommendations For QEMU versions 4.0.0 and earlier, consider restricting access to the QMP interface to trusted users only, and avoid exposing the -qmp interface to the internet via a tcp socket. As a temporary workaround, consider disabling the guest exec command until a secure configuration can be implemented. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Exposure of Resource to Wrong Sphere

OS Command Injection

Weakness Enumeration

CWE-668

CWE-78

Related Identifiers

ALT-PU-2019-2496

ALT-PU-2019-2534

CVE-2019-12929

Affected Products

Alt Linux

Debian

Qemu

References · 23

• 🔥 https://fakhrizulkifli.github.io/posts/2019/06/06/CVE-2019-12929 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12929 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-12929 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12155 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12928 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13164 · Security Note
• https://errata.altlinux.org/ALT-PU-2019-2496 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-12929 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-12929 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12929 · Security Note
• https://cve.org/CVERecord?id=CVE-2019-12929 · Security Note
• https://security-tracker.debian.org/tracker/source-package/qemu · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-12929 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00700 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2019-12929 · Vendor Advisory