CVE-2019-15034
MEDIUM
5.8
CVSS Score
Published: March 10, 2020 at 05:19 PM UTC
Updated: June 17, 2026 at 02:19 AM UTC
1 product affected across 1 vendorQEMU
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.8
Exploit prediction
EPSS 0.4%
Description
hw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation, leading to a buffer overflow involving the PCIe extended config space.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (4)
Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00007.htmlx_refsource_MISCMailing ListPatchThird Party Advisory
Source: [email protected]
https://lists.gnu.org/archive/html/qemu-devel/2019-08/msg01959.htmlVendor Advisoryx_refsource_DEBIAN
Source: [email protected]
https://www.debian.org/security/2020/dsa-4665CVSS
- Attack Vector
- LOCAL
- Complexity
- HIGH
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- LOW
- Integrity
- LOW
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-120
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card