CVE-2019-8934

🗓️ 17 Mar 2019 19:11:30Reported by mitreType

cve🔗 web.nvd.nist.gov👁 202 Views🌐 WEB

QEMU 3.1.0 allows Information Exposure via /proc/device-tre

Reporter	Title	Published	Views	Family All 48
BDU FSTEC	QEMU Hardware Emulation Port Access Confidential Data	27 Oct 202100:00	–	bdu_fstec
Cvelist	CVE-2019-8934	17 Mar 201919:11	–	cvelist
Debian CVE	CVE-2019-8934	17 Mar 201919:11	–	debiancve
Oracle linux	qemu security update	14 May 201900:00	–	oraclelinux
Oracle linux	qemu security update	14 May 201900:00	–	oraclelinux
EUVD	EUVD-2019-18322	7 Oct 202500:30	–	euvd
Mend	CVE-2019-8934	17 Mar 201919:11	–	mend
NVD	CVE-2019-8934	21 Mar 201916:01	–	nvd
Tenable Nessus	openSUSE Security Update : qemu (openSUSE-2019-1274)	26 Apr 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : qemu (openSUSE-2019-1405) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	21 May 201900:00	–	nessus

NVD

Node

qemu qemuRange≤3.1.0

Node

Source	Link
openwall	www.openwall.com/lists/oss-security/2019/02/21/1
security	www.security.netapp.com/advisory/ntap-20190411-0006/
lists	www.lists.opensuse.org/opensuse-security-announce/2019-04/msg00094.html
lists	www.lists.gnu.org/archive/html/qemu-devel/2019-02/msg04821.html
lists	www.lists.opensuse.org/opensuse-security-announce/2019-05/msg00040.html
securityfocus	www.securityfocus.com/bid/107115

Parameter	Position	Path	Description	CWE
system-id	path	/proc/device-tree/system-id	Information exposure via the /proc/device-tree/system-id attribute shared with the guest.	CWE-668
model	path	/proc/device-tree/model	Information exposure via the /proc/device-tree/model attribute shared with the guest.	CWE-668

17 Jun 2026 02:42Current

3.7Low risk

Vulners AI Score3.7

CVSS 22.1

CVSS 3.13.3

EPSS0.00604