qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name (obtained from bridge.conf or a --br=bridge option) is limited to the IFNAMSIZ size, which can lead to an ACL bypass.
{ "vanir_signatures": [ { "source": "https://github.com/qemu/qemu/commit/03d7712b4bcd47bfe0fe14ba2fffa87e111fa086", "target": { "file": "qemu-bridge-helper.c", "function": "parse_acl_file" }, "signature_version": "v1", "id": "CVE-2019-13164-1ef7ce4a", "signature_type": "Function", "deprecated": false, "digest": { "function_hash": "41426315551414297210663211720812776931", "length": 1557.0 } }, { "source": "https://github.com/qemu/qemu/commit/03d7712b4bcd47bfe0fe14ba2fffa87e111fa086", "target": { "file": "qemu-bridge-helper.c", "function": "main" }, "signature_version": "v1", "id": "CVE-2019-13164-cc4fb03c", "signature_type": "Function", "deprecated": false, "digest": { "function_hash": "170325292437599419986127576043735349022", "length": 4546.0 } }, { "source": "https://github.com/qemu/qemu/commit/03d7712b4bcd47bfe0fe14ba2fffa87e111fa086", "target": { "file": "qemu-bridge-helper.c" }, "signature_version": "v1", "id": "CVE-2019-13164-eb0e62f0", "signature_type": "Line", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "211513316946889016154749607856153075353", "226785892536120363561254550103355456847", "51206359503668392939837952789932272761", "270641154988493976912077150012143547006", "310919882982110041900101168091821323252", "66020126494683053387192932704542608876", "104315995863403237842817858149942900094" ] } } ] }