exploitDog

GHSA-g6ww-98w5-h2gm

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2020-7211
https://gitlab.freedesktop.org/slirp/libslirp/commit/14ec36e107a8c9af7d0a80c3571fe39b291ff1d4
https://security-tracker.debian.org/tracker/CVE-2020-7211
http://www.openwall.com/lists/oss-security/2020/01/17/2

EPSS

Процентиль: 91%

0.04193

Низкий

CVE ID

Связанные уязвимости

CVE-2020-7211

CVSS3: 7.5

ubuntu

почти 7 лет назад

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

CVE-2020-7211

CVSS3: 3.8

redhat

почти 7 лет назад

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

CVE-2020-7211

CVSS3: 7.5

nvd

почти 7 лет назад

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

CVE-2020-7211

CVSS3: 7.5

msrc

около 6 лет назад

tftp.c in libslirp 4.1.0 as used in QEMU 4.2.0 does not prevent ..\ directory traversal on Windows.

CVE-2020-7211

CVSS3: 7.5

debian

почти 7 лет назад

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ ...

EPSS

Процентиль: 91%

0.04193

Низкий

CVE ID