exploitDog

GHSA-g6ww-98w5-h2gm

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2020-7211
https://gitlab.freedesktop.org/slirp/libslirp/commit/14ec36e107a8c9af7d0a80c3571fe39b291ff1d4
https://security-tracker.debian.org/tracker/CVE-2020-7211
http://www.openwall.com/lists/oss-security/2020/01/17/2

EPSS

Процентиль: 90%

0.04141

Низкий

CVE ID

Связанные уязвимости

CVE-2020-7211

CVSS3: 7.5

ubuntu

больше 6 лет назад

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

CVE-2020-7211

CVSS3: 3.8

redhat

больше 6 лет назад

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

CVE-2020-7211

CVSS3: 7.5

nvd

больше 6 лет назад

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

CVE-2020-7211

CVSS3: 7.5

msrc

почти 6 лет назад

tftp.c in libslirp 4.1.0 as used in QEMU 4.2.0 does not prevent ..\ directory traversal on Windows.

CVE-2020-7211

CVSS3: 7.5

debian

больше 6 лет назад

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ ...

EPSS

Процентиль: 90%

0.04141

Низкий

CVE ID