CVE-2020-7211

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-7211
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7211.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-7211
Downstream
DEBIAN (1)
RHBA (1)
SUSE (7)
Related
SUSE (7)
Published
2020-01-21T17:15:12Z
Modified
2026-08-07T15:14:44Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

References

Affected packages

Git
github.com/qemu/qemu

Affected ranges

Type
GIT
Repo
https://github.com/qemu/qemu
Events
Introduced
b0ca999a43a22b38158a222233d3f5881648bb4f
Last Affected
b0ca999a43a22b38158a222233d3f5881648bb4f
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:qemu:qemu:4.2.0:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "4.2.0"
        },
        {
            "last_affected":  "4.2.0"
        }
    ],
    "source":  "CPE_STRING"
}

Affected versions

4.*
4.2.0
v4.*
v4.2.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7211.json"
github.com/spring-projects/spring-framework

Affected ranges

Type
GIT
Repo
https://github.com/spring-projects/spring-framework
Events
Introduced
8d2fd1163309e659c7411b7e5557eddb912ec684
Last Affected
8d2fd1163309e659c7411b7e5557eddb912ec684
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:libslirp_project:libslirp:4.1.0:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "4.1.0"
        },
        {
            "last_affected":  "4.1.0"
        }
    ],
    "source":  "CPE_STRING"
}

Affected versions

4.*
4.1.0
v4.*
v4.1.0.RELEASE

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7211.json"
gitlab.com/qemu-project/qemu

Affected ranges

Type
GIT
Repo
https://gitlab.com/qemu-project/qemu
Events
Introduced
b0ca999a43a22b38158a222233d3f5881648bb4f
Last Affected
b0ca999a43a22b38158a222233d3f5881648bb4f
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:qemu:qemu:4.2.0:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "4.2.0"
        },
        {
            "last_affected":  "4.2.0"
        }
    ],
    "source":  "CPE_STRING"
}

Affected versions

4.*
4.2.0
v4.*
v4.2.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7211.json"
gitlab.freedesktop.org/slirp/libslirp

Affected ranges

Type
GIT
Repo
https://gitlab.freedesktop.org/slirp/libslirp
Events
Introduced
6651ba26c4e94f64d6448a2db4991269ce553bd9
Last Affected
6651ba26c4e94f64d6448a2db4991269ce553bd9
Fixed
14ec36e107a8c9af7d0a80c3571fe39b291ff1d4
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:libslirp_project:libslirp:4.1.0:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "4.1.0"
        },
        {
            "last_affected":  "4.1.0"
        }
    ],
    "source":  [
        "CPE_STRING",
        "REFERENCES"
    ]
}

Affected versions

4.*
4.1.0
v4.*
v4.1.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7211.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "120643303157668002325465674923733077484",
            "length":  2682
        },
        "id":  "CVE-2020-7211-ac505295",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://gitlab.freedesktop.org/slirp/libslirp@14ec36e107a8c9af7d0a80c3571fe39b291ff1d4",
        "target":  {
            "file":  "src/tftp.c",
            "function":  "tftp_handle_rrq"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "335400942427289243216194261493011164826",
                "112539507008349734606060646785474580570",
                "6747955274008167017013603513309967456",
                "321079386013491220200005200596066450513",
                "213290603849672081954127312170418223250"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2020-7211-ad897835",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://gitlab.freedesktop.org/slirp/libslirp@14ec36e107a8c9af7d0a80c3571fe39b291ff1d4",
        "target":  {
            "file":  "src/tftp.c"
        }
    }
]
vanir_signatures_modified 
"2026-08-07T15:14:44Z"