tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Aug 31, 2020 | Jan 21, 2020 |
| Redhat Openshift | — | Upgrade slirp4netns | Dec 29, 2020 | Dec 30, 2019 |
| Suse | — | Upgrade xen-tools-domuUpgrade xen-libsUpgrade xen-doc-htmlUpgrade xen-kmp-defaultUpgrade xenUpgrade xen-develUpgrade xen-libs-32bitUpgrade xen-kmp-paeUpgrade xen-tools | Feb 7, 2020 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub