Update severity for CVE-2019-12247/qemu

Whilst beeing a bug needed to be fixed upstream disputed the issue to be
actually exploitable. https://lists.gnu.org/archive/html/qemu-devel/2019-05/msg05457.html