CVE-2020-7211

Katalog CVE

CVSS 7.5 · High EPSS 4,2%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada libslirp project libslirp, qemu. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

Rincian

Terbit di NVD

21 Januari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

4,2% peluang dieksploitasi; lebih tinggi dari 90,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gitlab.freedesktop.org/slirp/libslirp/commit/14ec36e107a8c9af7d0a80c3571fe39b291ff1d4 patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2020/01/17/2 mailing list · advisory pihak ketiga
• https://security-tracker.debian.org/tracker/CVE-2020-7211 advisory pihak ketiga