CVE-2020-8608

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-8608
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8608.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-8608
Downstream
Related
Published
2020-02-06T17:15:14.723Z
Modified
2026-07-09T00:12:16.506442Z
Severity
  • 5.6 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
[none]
Details

In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "8.0"
                },
                {
                    "last_affected": "8.0"
                },
                {
                    "introduced": "9.0"
                },
                {
                    "last_affected": "9.0"
                },
                {
                    "introduced": "10.0"
                },
                {
                    "last_affected": "10.0"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "debian:debian_linux",
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ]
        },
        {
            "extracted_events": [
                {
                    "introduced": "15.1"
                },
                {
                    "last_affected": "15.1"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "opensuse:leap",
            "cpes": [
                "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*"
            ]
        }
    ]
}
References

Affected packages

Git / github.com/spring-projects/spring-framework

Affected ranges

Type
GIT
Repo
https://github.com/spring-projects/spring-framework
Events
Introduced
8d2fd1163309e659c7411b7e5557eddb912ec684
Last affected
8d2fd1163309e659c7411b7e5557eddb912ec684
Database specific 
{
    "extracted_events": [
        {
            "introduced": "4.1.0"
        },
        {
            "last_affected": "4.1.0"
        }
    ],
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:libslirp_project:libslirp:4.1.0:*:*:*:*:*:*:*"
}

Affected versions

4.*
4.1.0
v4.*
v4.1.0.RELEASE

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8608.json"

Git / gitlab.freedesktop.org/slirp/libslirp

Affected ranges

Type
GIT
Repo
https://gitlab.freedesktop.org/slirp/libslirp
Events
Introduced
6651ba26c4e94f64d6448a2db4991269ce553bd9
Last affected
6651ba26c4e94f64d6448a2db4991269ce553bd9
Fixed
68ccb8021a838066f0951d4b2817eb6b6f10a843
Database specific 
{
    "extracted_events": [
        {
            "introduced": "4.1.0"
        },
        {
            "last_affected": "4.1.0"
        }
    ],
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:libslirp_project:libslirp:4.1.0:*:*:*:*:*:*:*"
}

Affected versions

4.*
4.1.0
v4.*
v4.1.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8608.json"
vanir_signatures_modified 
"2026-07-09T00:12:16Z"
vanir_signatures 
[
    {
        "digest": {
            "line_hashes": [
                "246648876760480391059830316711041769480",
                "127439615238555046192080519638893348443",
                "223589317652917045666002013374394968170",
                "245596684563756949555195469012064437300",
                "194526991643005850067677639536938007027",
                "188893205728168835746341423704448688516",
                "282393555808581485874090025117595990314",
                "153431303589887970174056372056571214668",
                "25858351891616231709346514064225000812",
                "91982728810868740773815739603840717676",
                "317060831391956178219433144069180100685",
                "188893205728168835746341423704448688516",
                "92782018852356111485708160247098003542",
                "139311481486254240105809272040429908295",
                "149191584418569480501778977001248663817",
                "298045386813361464402400620012150195713",
                "272848814047538639148431331631225512190",
                "208323013283776806435445663037770380544",
                "236421557069710862660078927174498374671",
                "245674776238120024263612856855299285000",
                "267185354513032656647907935334471723415",
                "216933895929362785716587362691680375108",
                "62292012986368683187524842658639499442",
                "176029839855673906255372583779609769276",
                "132520196737418859885083555945567545859",
                "82162758469354334629913884814690013392",
                "336934841844850221297544373916342120898",
                "41361268106330889474799305467222635341",
                "100711868396011321646319668050873026326",
                "62292012986368683187524842658639499442",
                "77024491429738668846874679598737687986",
                "266114763669921623380735087941777007699",
                "285203754165203042380363300884601475109",
                "211022342319323311175830755330711834752",
                "96217543674087600064345527018584851810",
                "207095843971067530227188775095233988813",
                "62292012986368683187524842658639499442",
                "117259289927896706883870945701730633998",
                "92404445707750801789631655651031279228",
                "164102768652786240203980105465034849313",
                "292176810797231257996730492336267094302",
                "33450088625274173574651435422396885749",
                "261711723404151449456034420131531885862"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2020-8608-6b31d243",
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://gitlab.freedesktop.org/slirp/libslirp@68ccb8021a838066f0951d4b2817eb6b6f10a843",
        "signature_type": "Line",
        "target": {
            "file": "src/tcp_subr.c"
        }
    },
    {
        "digest": {
            "function_hash": "100197469861033783327683667740240832823",
            "length": 6616.0
        },
        "id": "CVE-2020-8608-b1ef7348",
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://gitlab.freedesktop.org/slirp/libslirp@68ccb8021a838066f0951d4b2817eb6b6f10a843",
        "signature_type": "Function",
        "target": {
            "function": "tcp_emu",
            "file": "src/tcp_subr.c"
        }
    }
]