tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Aug 31, 2020 | Jan 21, 2020 |
| Redhat Openshift | — | Upgrade slirp4netns | Dec 29, 2020 | Dec 30, 2019 |
| Suse | — | Upgrade xen-develUpgrade xen-kmp-defaultUpgrade xen-doc-htmlUpgrade xenUpgrade xen-tools-domuUpgrade xen-libsUpgrade xen-kmp-paeUpgrade xen-toolsUpgrade xen-libs-32bit | Feb 7, 2020 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub