CVE-2020-7211

Опубликовано: 21 янв. 2020

Источник: debian

EPSS Низкий

Описание

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

Пакет	Статус	Версия исправления	Релиз	Тип
libslirp	unfixed			package

https://bugs.launchpad.net/qemu/+bug/1812451
https://gitlab.freedesktop.org/slirp/libslirp/commit/14ec36e107a8c9af7d0a80c3571fe39b291ff1d4

EPSS

Процентиль: 90%

0.04141

Низкий

CVE-2020-7211

CVSS3: 7.5

ubuntu

больше 6 лет назад

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

CVE-2020-7211

CVSS3: 3.8

redhat

больше 6 лет назад

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

CVE-2020-7211

CVSS3: 7.5

nvd

больше 6 лет назад

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

CVE-2020-7211

CVSS3: 7.5

msrc

почти 6 лет назад

tftp.c in libslirp 4.1.0 as used in QEMU 4.2.0 does not prevent ..\ directory traversal on Windows.

GHSA-g6ww-98w5-h2gm

github

около 4 лет назад

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

EPSS

Процентиль: 90%

0.04141

Низкий