CVE-2020-7211

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-7211
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7211.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-7211
Downstream
Related
Published
2020-01-21T17:15:12.580Z
Modified
2026-07-08T17:56:51.972206Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

References

Affected packages

Git
github.com/qemu/qemu

Affected ranges

Type
GIT
Repo
https://github.com/qemu/qemu
Events
Introduced
b0ca999a43a22b38158a222233d3f5881648bb4f
Last affected
b0ca999a43a22b38158a222233d3f5881648bb4f
Database specific 
{
    "cpe": "cpe:2.3:a:qemu:qemu:4.2.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.2.0"
        },
        {
            "last_affected": "4.2.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

4.*
4.2.0
v4.*
v4.2.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7211.json"
github.com/spring-projects/spring-framework

Affected ranges

Type
GIT
Repo
https://github.com/spring-projects/spring-framework
Events
Introduced
8d2fd1163309e659c7411b7e5557eddb912ec684
Last affected
8d2fd1163309e659c7411b7e5557eddb912ec684
Database specific 
{
    "cpe": "cpe:2.3:a:libslirp_project:libslirp:4.1.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.1.0"
        },
        {
            "last_affected": "4.1.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

4.*
4.1.0
v4.*
v4.1.0.RELEASE

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7211.json"
gitlab.com/qemu-project/qemu

Affected ranges

Type
GIT
Repo
https://gitlab.com/qemu-project/qemu
Events
Introduced
b0ca999a43a22b38158a222233d3f5881648bb4f
Last affected
b0ca999a43a22b38158a222233d3f5881648bb4f
Database specific 
{
    "cpe": "cpe:2.3:a:qemu:qemu:4.2.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.2.0"
        },
        {
            "last_affected": "4.2.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

4.*
4.2.0
v4.*
v4.2.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7211.json"
gitlab.freedesktop.org/slirp/libslirp

Affected ranges

Type
GIT
Repo
https://gitlab.freedesktop.org/slirp/libslirp
Events
Introduced
6651ba26c4e94f64d6448a2db4991269ce553bd9
Last affected
6651ba26c4e94f64d6448a2db4991269ce553bd9
Fixed
14ec36e107a8c9af7d0a80c3571fe39b291ff1d4
Database specific 
{
    "cpe": "cpe:2.3:a:libslirp_project:libslirp:4.1.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.1.0"
        },
        {
            "last_affected": "4.1.0"
        }
    ],
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ]
}

Affected versions

4.*
4.1.0
v4.*
v4.1.0

Database specific

vanir_signatures 
[
    {
        "digest": {
            "function_hash": "120643303157668002325465674923733077484",
            "length": 2682.0
        },
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2020-7211-ac505295",
        "target": {
            "file": "src/tftp.c",
            "function": "tftp_handle_rrq"
        },
        "source": "https://gitlab.freedesktop.org/slirp/libslirp@14ec36e107a8c9af7d0a80c3571fe39b291ff1d4",
        "signature_version": "v1"
    },
    {
        "digest": {
            "line_hashes": [
                "335400942427289243216194261493011164826",
                "112539507008349734606060646785474580570",
                "6747955274008167017013603513309967456",
                "321079386013491220200005200596066450513",
                "213290603849672081954127312170418223250"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2020-7211-ad897835",
        "target": {
            "file": "src/tftp.c"
        },
        "source": "https://gitlab.freedesktop.org/slirp/libslirp@14ec36e107a8c9af7d0a80c3571fe39b291ff1d4",
        "signature_version": "v1"
    }
]
vanir_signatures_modified 
"2026-07-08T17:56:51Z"
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7211.json"