Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 680834 (CVE-2019-9824) - <app-emulation/qemu-3.1.0-r4: Slirp: information leakage in tcp_emu() due to uninitialized stack
Summary: <app-emulation/qemu-3.1.0-r4: Slirp: information leakage in tcp_emu() due to ...
Alias: CVE-2019-9824
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
Whiteboard: B4 [glsa+ cve]
Depends on:
Blocks: CVE-2018-20815
  Show dependency tree
Reported: 2019-03-18 07:39 UTC by Agostino Sarubbo
Modified: 2019-04-25 00:00 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2019-03-18 07:39:45 UTC
From ${URL} :

An information leakage issue was found in the SLiRP networking implementation 
of the QEMU emulator. It occurs in tcp_emu() routine while emulating 
Identification protocol, when crafted messages are sent to make it return 
uninitialized variables.

A user/process could use this flaw to read uninitialised stack memory contents 
from the QEMU process resulting in information leakage.

Upstream patch:

@maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.
Comment 1 Larry the Git Cow gentoo-dev 2019-04-08 02:52:25 UTC
The bug has been referenced in the following commit(s):

commit 6fec2a540ce3e7cbd378287ee2837aeba6406eaf
Author:     Matthias Maier <>
AuthorDate: 2019-04-08 02:26:43 +0000
Commit:     Matthias Maier <>
CommitDate: 2019-04-08 02:51:08 +0000

    app-emulation/qemu: multiple security fixes for 3.1.0
    Package-Manager: Portage-2.3.62, Repoman-2.3.12
    Signed-off-by: Matthias Maier <>

 app-emulation/qemu/Manifest             | 1 +
 app-emulation/qemu/qemu-3.1.0-r4.ebuild | 6 ++----
 2 files changed, 3 insertions(+), 4 deletions(-)
Comment 2 GLSAMaker/CVETool Bot gentoo-dev 2019-04-25 00:00:32 UTC
This issue was resolved and addressed in
 GLSA 201904-25 at
by GLSA coordinator Aaron Bauman (b-man).