p PatchFirst

CVE-2020-8608

CVE-2020-8608

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.

CVSS 5.6 · Medium · EPSS 2.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • libslirp Debian:12

    Affected ranges
    • ECOSYSTEM: < 4.2.0-1

    Update to 4.2.0-1

  • libslirp Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.2.0-1

    Update to 4.2.0-1

  • libslirp Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.2.0-1

    Update to 4.2.0-1

  • qemu Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:4.1-2

    Update to 1:4.1-2

  • qemu Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:4.1-2

    Update to 1:4.1-2

  • qemu Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:4.1-2

    Update to 1:4.1-2

  • slirp Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:1.0.17-11

    Update to 1:1.0.17-11

  • slirp Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:1.0.17-11

    Update to 1:1.0.17-11

  • slirp Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:1.0.17-11

    Update to 1:1.0.17-11

  • slirp4netns Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.0.1-1

    Update to 1.0.1-1

  • slirp4netns Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.0.1-1

    Update to 1.0.1-1

  • slirp4netns Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.0.1-1

    Update to 1.0.1-1

  • qemu Ubuntu:Pro:14.04:LTS

    Versions
    • 1.5.0+dfsg-3ubuntu5
    • 1.5.0+dfsg-3ubuntu6
    • 1.6.0+dfsg-2ubuntu1
    • 1.6.0+dfsg-2ubuntu2
    • 1.6.0+dfsg-2ubuntu3
    • 1.6.0+dfsg-2ubuntu4
    • 1.7.0+dfsg-2ubuntu1
    • 1.7.0+dfsg-2ubuntu2
    • 1.7.0+dfsg-2ubuntu3
    • 1.7.0+dfsg-2ubuntu4
    • 1.7.0+dfsg-2ubuntu5
    • 1.7.0+dfsg-2ubuntu7
    • 1.7.0+dfsg-2ubuntu8
    • 1.7.0+dfsg-2ubuntu9
    • 1.7.0+dfsg-3ubuntu1~ppa1
    • 1.7.0+dfsg-3ubuntu1
    • 1.7.0+dfsg-3ubuntu2
    • 1.7.0+dfsg-3ubuntu3
    • 1.7.0+dfsg-3ubuntu4
    • 1.7.0+dfsg-3ubuntu5
    • 1.7.0+dfsg-3ubuntu6
    • 1.7.0+dfsg-3ubuntu7
    • 2.0.0~rc1+dfsg-0ubuntu1
    • 2.0.0~rc1+dfsg-0ubuntu2
    • 2.0.0~rc1+dfsg-0ubuntu3
    • 2.0.0~rc1+dfsg-0ubuntu3.1
    • 2.0.0+dfsg-2ubuntu1
    • 2.0.0+dfsg-2ubuntu1.1
    • 2.0.0+dfsg-2ubuntu1.2
    • 2.0.0+dfsg-2ubuntu1.3
    • 2.0.0+dfsg-2ubuntu1.5
    • 2.0.0+dfsg-2ubuntu1.6
    • 2.0.0+dfsg-2ubuntu1.7
    • 2.0.0+dfsg-2ubuntu1.8
    • 2.0.0+dfsg-2ubuntu1.9
    • 2.0.0+dfsg-2ubuntu1.10
    • 2.0.0+dfsg-2ubuntu1.11
    • 2.0.0+dfsg-2ubuntu1.13
    • 2.0.0+dfsg-2ubuntu1.14
    • 2.0.0+dfsg-2ubuntu1.15
    • 2.0.0+dfsg-2ubuntu1.16
    • 2.0.0+dfsg-2ubuntu1.17
    • 2.0.0+dfsg-2ubuntu1.18
    • 2.0.0+dfsg-2ubuntu1.19
    • 2.0.0+dfsg-2ubuntu1.20
    • 2.0.0+dfsg-2ubuntu1.21
    • 2.0.0+dfsg-2ubuntu1.22
    • 2.0.0+dfsg-2ubuntu1.24
    • 2.0.0+dfsg-2ubuntu1.25
    • 2.0.0+dfsg-2ubuntu1.26
    • 2.0.0+dfsg-2ubuntu1.27
    • 2.0.0+dfsg-2ubuntu1.28
    • 2.0.0+dfsg-2ubuntu1.29
    • 2.0.0+dfsg-2ubuntu1.30
    • 2.0.0+dfsg-2ubuntu1.31
    • 2.0.0+dfsg-2ubuntu1.32
    • 2.0.0+dfsg-2ubuntu1.33
    • 2.0.0+dfsg-2ubuntu1.34
    • 2.0.0+dfsg-2ubuntu1.35
    • 2.0.0+dfsg-2ubuntu1.36
    • 2.0.0+dfsg-2ubuntu1.38
    • 2.0.0+dfsg-2ubuntu1.39
    • 2.0.0+dfsg-2ubuntu1.40
    • 2.0.0+dfsg-2ubuntu1.41
    • 2.0.0+dfsg-2ubuntu1.42
    • 2.0.0+dfsg-2ubuntu1.43
    • 2.0.0+dfsg-2ubuntu1.44
    • 2.0.0+dfsg-2ubuntu1.45
    • 2.0.0+dfsg-2ubuntu1.46
    • 2.0.0+dfsg-2ubuntu1.47
    • 2.0.0+dfsg-2ubuntu1.47+esm1
    • 2.0.0+dfsg-2ubuntu1.47+esm2
    • 2.0.0+dfsg-2ubuntu1.47+esm3
    Affected ranges
    • ECOSYSTEM: < 2.0.0+dfsg-2ubuntu1.47+esm4

    Update to 2.0.0+dfsg-2ubuntu1.47+esm4

  • slirp Ubuntu:Pro:14.04:LTS

    Versions
    • 1:1.0.17-7
    Affected ranges
    • ECOSYSTEM: < 1:1.0.17-7+deb8u2build0.14.04.1+esm1

    Update to 1:1.0.17-7+deb8u2build0.14.04.1+esm1

  • qemu Ubuntu:16.04:LTS

    Versions
    • 1:2.3+dfsg-5ubuntu9
    • 1:2.3+dfsg-5ubuntu10
    • 1:2.4+dfsg-4ubuntu1
    • 1:2.4+dfsg-4ubuntu2
    • 1:2.4+dfsg-4ubuntu3
    • 1:2.4+dfsg-5ubuntu3
    • 1:2.5+dfsg-1ubuntu2
    • 1:2.5+dfsg-1ubuntu3
    • 1:2.5+dfsg-1ubuntu4
    • 1:2.5+dfsg-1ubuntu5
    • 1:2.5+dfsg-5ubuntu1
    • 1:2.5+dfsg-5ubuntu2
    • 1:2.5+dfsg-5ubuntu4
    • 1:2.5+dfsg-5ubuntu6
    • 1:2.5+dfsg-5ubuntu7
    • 1:2.5+dfsg-5ubuntu10
    • 1:2.5+dfsg-5ubuntu10.1
    • 1:2.5+dfsg-5ubuntu10.2
    • 1:2.5+dfsg-5ubuntu10.3
    • 1:2.5+dfsg-5ubuntu10.4
    • 1:2.5+dfsg-5ubuntu10.5
    • 1:2.5+dfsg-5ubuntu10.6
    • 1:2.5+dfsg-5ubuntu10.7
    • 1:2.5+dfsg-5ubuntu10.8
    • 1:2.5+dfsg-5ubuntu10.9
    • 1:2.5+dfsg-5ubuntu10.10
    • 1:2.5+dfsg-5ubuntu10.11
    • 1:2.5+dfsg-5ubuntu10.13
    • 1:2.5+dfsg-5ubuntu10.14
    • 1:2.5+dfsg-5ubuntu10.15
    • 1:2.5+dfsg-5ubuntu10.16
    • 1:2.5+dfsg-5ubuntu10.20
    • 1:2.5+dfsg-5ubuntu10.21
    • 1:2.5+dfsg-5ubuntu10.22
    • 1:2.5+dfsg-5ubuntu10.24
    • 1:2.5+dfsg-5ubuntu10.25
    • 1:2.5+dfsg-5ubuntu10.26
    • 1:2.5+dfsg-5ubuntu10.28
    • 1:2.5+dfsg-5ubuntu10.29
    • 1:2.5+dfsg-5ubuntu10.30
    • 1:2.5+dfsg-5ubuntu10.31
    • 1:2.5+dfsg-5ubuntu10.32
    • 1:2.5+dfsg-5ubuntu10.33
    • 1:2.5+dfsg-5ubuntu10.34
    • 1:2.5+dfsg-5ubuntu10.35
    • 1:2.5+dfsg-5ubuntu10.36
    • 1:2.5+dfsg-5ubuntu10.37
    • 1:2.5+dfsg-5ubuntu10.38
    • 1:2.5+dfsg-5ubuntu10.39
    • 1:2.5+dfsg-5ubuntu10.40
    • 1:2.5+dfsg-5ubuntu10.41
    • 1:2.5+dfsg-5ubuntu10.42
    Affected ranges
    • ECOSYSTEM: < 1:2.5+dfsg-5ubuntu10.43

    Update to 1:2.5+dfsg-5ubuntu10.43

  • slirp Ubuntu:16.04:LTS

    Versions
    • 1:1.0.17-8
    Affected ranges
    • ECOSYSTEM: < 1:1.0.17-8ubuntu16.04.1

    Update to 1:1.0.17-8ubuntu16.04.1

  • qemu Ubuntu:18.04:LTS

    Versions
    • 1:2.10+dfsg-0ubuntu3
    • 1:2.10+dfsg-0ubuntu4
    • 1:2.10+dfsg-0ubuntu5
    • 1:2.11+dfsg-1ubuntu1
    • 1:2.11+dfsg-1ubuntu2
    • 1:2.11+dfsg-1ubuntu4
    • 1:2.11+dfsg-1ubuntu5
    • 1:2.11+dfsg-1ubuntu6
    • 1:2.11+dfsg-1ubuntu7
    • 1:2.11+dfsg-1ubuntu7.1
    • 1:2.11+dfsg-1ubuntu7.2
    • 1:2.11+dfsg-1ubuntu7.3
    • 1:2.11+dfsg-1ubuntu7.4
    • 1:2.11+dfsg-1ubuntu7.5
    • 1:2.11+dfsg-1ubuntu7.6
    • 1:2.11+dfsg-1ubuntu7.7
    • 1:2.11+dfsg-1ubuntu7.8
    • 1:2.11+dfsg-1ubuntu7.9
    • 1:2.11+dfsg-1ubuntu7.10
    • 1:2.11+dfsg-1ubuntu7.12
    • 1:2.11+dfsg-1ubuntu7.13
    • 1:2.11+dfsg-1ubuntu7.14
    • 1:2.11+dfsg-1ubuntu7.15
    • 1:2.11+dfsg-1ubuntu7.17
    • 1:2.11+dfsg-1ubuntu7.18
    • 1:2.11+dfsg-1ubuntu7.19
    • 1:2.11+dfsg-1ubuntu7.20
    • 1:2.11+dfsg-1ubuntu7.21
    • 1:2.11+dfsg-1ubuntu7.22
    Affected ranges
    • ECOSYSTEM: < 1:2.11+dfsg-1ubuntu7.23

    Update to 1:2.11+dfsg-1ubuntu7.23

  • slirp Ubuntu:18.04:LTS

    Versions
    • 1:1.0.17-8
    • 1:1.0.17-8build1
    Affected ranges
    • ECOSYSTEM: < 1:1.0.17-8ubuntu18.04.1

    Update to 1:1.0.17-8ubuntu18.04.1

  • libslirp Ubuntu:20.04:LTS

    Versions
    • 4.0.0-1
    • 4.0.0-2
    • 4.1.0-1
    • 4.1.0-2
    Affected ranges
    • ECOSYSTEM: < 4.1.0-2ubuntu1

    Update to 4.1.0-2ubuntu1

  • slirp Ubuntu:20.04:LTS

    Versions
    • 1:1.0.17-8build2
    • 1:1.0.17-9
    • 1:1.0.17-10
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • slirp4netns Ubuntu:20.04:LTS

    Versions
    • 0.4.1-1
    • 0.4.3-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • slirp Ubuntu:22.04:LTS

    Versions
    • 1:1.0.17-11
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • slirp Ubuntu:24.04:LTS

    Versions
    • 1:1.0.17-11
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →