CVE-2020-29130 - CVE House
Back to Database
Status published Medium CVE-2020-29130

slirp.c in libslirp through 4.3.1 has a buffer over-read because...

Vulnerability Description

slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-29130

Credits & Attribution

No credits recorded in the NVD database.

References

More from libslirp project

View All →
CVE-2020-8608
In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses...
Medium 5.6
CVE-2020-7211
tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does...
High 7.5
CVE-2020-7039
tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU...
Medium 5.6
CVE-2020-29129
ncsi.c in libslirp through 4.3.1 has a buffer over-read because...
Medium 4.3
CVE-2019-15890
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free...
High 7.5

Affected Vendor

libslirp project

View all reports →

Affected Software

libslirp, debian linux, fedora
Vulnerable Versions:
0, 9.0, 32, 33

Timeline

Official Publish: November 26th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.