CVE-2020-7211
Fixed in a distro release EPSS 4%
tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.
Products: libslirp_project libslirp, qemu
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libslirp | 4.3.1-1 |
| Debian 13 | libslirp | 4.3.1-1 |
| Debian 14 | libslirp | 4.3.1-1 |
| Red Hat openshift 4.3 | cri-o | 0:1.16.2-15.dev.rhaos4.3.gita83f883.el8 |
| Red Hat openshift 4.3 | cri-o | 0:1.16.2-13.dev.rhaos4.3.gita83f883.el7 |
| Red Hat openshift 4.3 | openshift | 0:4.3.1-202001310552.git.0.331f390.el7 |
| Red Hat openshift 4.3 | openshift | 0:4.3.1-202001310552.git.0.331f390.el8 |
| Red Hat openshift 4.3 | openshift-clients | 0:4.3.1-202001310552.git.1.075d46a.el8 |
| Red Hat openshift 4.3 | openshift-clients | 0:4.3.1-202001310552.git.1.075d46a.el7 |
| Red Hat openshift 4.3 | openshift-clients-redistributable | 0:4.3.1-202001310552.git.1.075d46a.el7 |
| Red Hat openshift 4.3 | openshift-clients-redistributable | 0:4.3.1-202001310552.git.1.075d46a.el8 |
| Red Hat openshift 4.3 | openshift-hyperkube | 0:4.3.1-202001310552.git.0.331f390.el7 |
| Red Hat openshift 4.3 | openshift-hyperkube | 0:4.3.1-202001310552.git.0.331f390.el8 |
| Red Hat openshift 4.3 | slirp4netns | 0:0.4.2-3.git21fdece.el8 |
| Red Hat openshift 4.3 | slirp4netns-debuginfo | 0:0.4.2-3.git21fdece.el8 |
| Red Hat openshift 4.3 | slirp4netns-debugsource | 0:0.4.2-3.git21fdece.el8 |
| SUSE Enterprise Storage 5 | xen | 4.9.4_06-3.62.1 |
| SUSE HPE Helion OpenStack 8 | xen | 4.9.4_06-3.62.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | xen | 4.2.5_22-45.36.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | xen | 4.4.4_42-61.52.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | xen | 4.5.5_28-22.64.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | xen | 4.7.6_06-43.59.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | xen | 4.7.6_06-43.59.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | xen | 4.9.4_06-3.62.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | xen | 4.9.4_06-3.62.1 |
| SUSE Linux Enterprise Server 12 SP4 | xen | 4.11.3_04-2.23.1 |
| SUSE Linux Enterprise Server 12 SP5 | xen | 4.12.2_04-3.11.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | xen | 4.5.5_28-22.64.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | xen | 4.7.6_06-43.59.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | xen | 4.9.4_06-3.62.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | xen | 4.11.3_04-2.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | xen | 4.12.2_04-3.11.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | xen | 4.11.3_04-2.23.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | xen | 4.12.2_04-3.11.1 |
| SUSE OpenStack Cloud 7 | xen | 4.7.6_06-43.59.1 |
| SUSE OpenStack Cloud 8 | xen | 4.9.4_06-3.62.1 |
| SUSE OpenStack Cloud Crowbar 8 | xen | 4.9.4_06-3.62.1 |