Описание
tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libslirp | unfixed | package |
Примечания
https://bugs.launchpad.net/qemu/+bug/1812451
https://gitlab.freedesktop.org/slirp/libslirp/commit/14ec36e107a8c9af7d0a80c3571fe39b291ff1d4
EPSS
Процентиль: 53%
0.00305
Низкий
Связанные уязвимости
CVSS3: 7.5
ubuntu
около 6 лет назад
tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.
CVSS3: 3.8
redhat
около 6 лет назад
tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.
CVSS3: 7.5
nvd
около 6 лет назад
tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.
CVSS3: 7.5
msrc
больше 5 лет назад
tftp.c in libslirp 4.1.0 as used in QEMU 4.2.0 does not prevent ..\ directory traversal on Windows.
github
больше 3 лет назад
tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.
EPSS
Процентиль: 53%
0.00305
Низкий