Lucene search

GoogleOSV:CVE-2020-7211

HistoryJan 21, 2020 - 5:15 p.m.

CVE-2020-7211

2020-01-2117:15:12

Google

osv.dev

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.5%

JSON

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent …\ directory traversal on Windows.

CPENameOperatorVersion
qemueq0.10.6
qemueq0.13.0-rc0
qemueq3.1.0
qemueq0.8.2
qemueq1.1.0-rc4
qemueq4.1.0-rc1
qemueq2.6.0-rc1
qemueq2.6.0-rc3
qemueq0.11.0-rc0
qemueq2.8.0-rc2

Name	Operator	Version
qemu	eq	0.10.6
qemu	eq	0.13.0-rc0
qemu	eq	3.1.0
qemu	eq	0.8.2
qemu	eq	1.1.0-rc4
qemu	eq	4.1.0-rc1
qemu	eq	2.6.0-rc1
qemu	eq	2.6.0-rc3
qemu	eq	0.11.0-rc0
qemu	eq	2.8.0-rc2

Rows per page:

1-10 of 2381

References

www.openwall.com/lists/oss-security/2020/01/17/2

gitlab.freedesktop.org/slirp/libslirp/commit/14ec36e107a8c9af7d0a80c3571fe39b291ff1d4

security-tracker.debian.org/tracker/CVE-2020-7211