high7.5
CVE-2020-7211
tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.
Impact
tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libslirp Project | Libslirp | Version 4.1.0 |
| Qemu | Qemu | Version 4.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2020/01/17/2
- https://gitlab.freedesktop.org/slirp/libslirp/commit/14ec36e107a8c9af7d0a80c3571fe39b291ff1d4
- https://security-tracker.debian.org/tracker/CVE-2020-7211
- http://www.openwall.com/lists/oss-security/2020/01/17/2
- https://gitlab.freedesktop.org/slirp/libslirp/commit/14ec36e107a8c9af7d0a80c3571fe39b291ff1d4
- https://security-tracker.debian.org/tracker/CVE-2020-7211