CVE-2020-7211

ADVISORY - nist

Summary

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

EPSS Score⁠: 0.00305 (0.542)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-22⁠

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

ADVISORY - redhat

CWE-22⁠

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Impacted images

Advisories

NIST

CREATED

6 years ago

UPDATED

2 years ago

ADVISORY IDCVE-2020-7211⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-22⁠

CVSS SCORE

7.5high

Debian

CREATED

6 years ago

UPDATED

1 month ago

ADVISORY IDCVE-2020-7211⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

6 years ago

UPDATED

1 year ago

ADVISORY IDCVE-2020-7211⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7.5medium

Red Hat

CREATED

6 years ago

UPDATED

5 months ago

ADVISORY IDCVE-2020-7211⁠

EXPLOITABILITY SCORE

2.0

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-22⁠

CVSS SCORE

3.8low