CVE-2020-1983

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-05/msg00022.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2020-06/msg00001.html · Mailing List
• gitlab.freedesktop.org/slirp/libslirp/-/commit/9ac0371bb8c0a40f5d9f82a1c25129660e81df04 · Patch
• gitlab.freedesktop.org/slirp/libslirp/-/issues/20 · Exploit
• lists.debian.org/debian-lts-announce/2020/06/msg00032.html · Mailing List
• lists.debian.org/debian-lts-announce/2020/07/msg00020.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HWFD4MWV3YWIHVHSA2F7FKOLJFL4PHOX
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NKT2MTSINE4NUPG5L6BYH6N23NBNITOL
• usn.ubuntu.com/4372-1 · Third Party Advisory
• debian.org/security/2020/dsa-4665 · Third Party Advisory

libslirp のその他の脆弱性

• CVE-2021-3595低 3.8An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() functi…
• CVE-2021-3594低 3.8An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() functio…
• CVE-2021-3593低 3.8An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() functi…
• CVE-2021-3592低 3.8An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() funct…
• CVE-2020-29130中 4.3slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the t…