CVE-2020-29130

概要

参考情報

• openwall.com/lists/oss-security/2020/11/27/1 · Mailing List
• lists.debian.org/debian-lts-announce/2021/02/msg00024.html · Mailing List
• lists.debian.org/debian-lts-announce/2023/03/msg00013.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45S5IHSWYITJKMRT23HCHJQDI674AMTQ
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPCOHDEONMHH6QPJZKRLLCNRGRYODG7X
• lists.freedesktop.org/archives/slirp/2020-November/000115.html · Exploit

libslirp のその他の脆弱性

• CVE-2021-3595低 3.8An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() functi…
• CVE-2021-3594低 3.8An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() functio…
• CVE-2021-3593低 3.8An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() functi…
• CVE-2021-3592低 3.8An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() funct…
• CVE-2020-29129中 4.3ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the to…