Veracode Vulnerability DatabaseVERACODE:29424Information Disclosure
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
libslirp is vulnerable to information disclosure. A buffer over-read in slirp.c allows reading of a certain amount of header data pass the total packet length.
| CPE | Name | Operator | Version |
|---|---|---|---|
| qemu:stretch | eq | 1:2.8+dfsg-6+deb9u9 | |
| libslirp | eq | 4.3.0-r0 | |
| libslirp | eq | 4.2.0-r0 |
References
www.openwall.com/lists/oss-security/2020/11/27/1
lists.debian.org/debian-lts-announce/2021/02/msg00024.html
lists.fedoraproject.org/archives/list/[email protected]/message/45S5IHSWYITJKMRT23HCHJQDI674AMTQ/
lists.fedoraproject.org/archives/list/[email protected]/message/OPCOHDEONMHH6QPJZKRLLCNRGRYODG7X/
lists.freedesktop.org/archives/slirp/2020-November/000115.html
security-tracker.debian.org/tracker/CVE-2020-29130
Related
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N