PT-2020-19467 · Qemu+3 · Libslirp+4

Peter Maydell · Published 2020-01-21 · Updated 2020-08-11 · CVE-2020-7211

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions libslirp version 4.1.0 QEMU version 4.2.0

Description The issue concerns directory traversal on Windows due to a lack of prevention in tftp.c within libslirp.

Recommendations For libslirp version 4.1.0, consider restricting directory access to prevent traversal. For QEMU version 4.2.0, restrict the use of tftp.c until a fix is available.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

ALT-PU-2020-1912

ALT-PU-2020-2431

CVE-2020-7211

SUSE-SU-2020:0334-1

SUSE-SU-2020:0388-1

SUSE-SU-2020:1138-1

SUSE-SU-2020:1139-1

SUSE-SU-2020:14444-1

SUSE-SU-2020:14448-1

SUSE-SU-2020:1630-1

SUSE-SU-2020_1630-1

Affected Products

Alt Linux

Debian

Qemu

Suse

Libslirp

References · 93

• https://security-tracker.debian.org/tracker/CVE-2020-7211 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1138-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:14448-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1139-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-7211 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:14444-1 · Vendor Advisory
• https://gitlab.freedesktop.org/slirp/libslirp/commit/14ec36e107a8c9af7d0a80c3571fe39b291ff1d4 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-7211 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:0334-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7211 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2020:1630-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:0388-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2020-11741 · Note
• https://bugzilla.suse.com/1155200 · Note
• https://bugzilla.suse.com/1154461 · Note