CVE-2020-29130: Medium severity Libslirp Project Libslirp vulnerability
An out-of-bounds access issue was found in the SLiRP user networking implementation of QEMU. It could occur while processing ARP/NCSI packets, if the packet length was shorter than required to accommodate respective protocol headers and payload. A privileged guest user may use this flaw to potentially leak host information bytes.
Other sources
slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-29130?
CVE-2020-29130 is an out-of-bounds access issue in the SLiRP user networking implementation of QEMU.
What software is affected by CVE-2020-29130?
The affected software includes libslirp versions up to and including 4.3.1, Debian Linux 9.0, Fedora 32 and 33.
How can a privileged guest user exploit CVE-2020-29130?
A privileged guest user can exploit CVE-2020-29130 by triggering an out-of-bounds access issue during the processing of ARP/NCSI packets.
How severe is CVE-2020-29130?
CVE-2020-29130 has a severity rating of 4.3, which is considered medium.
How can I fix CVE-2020-29130?
To fix CVE-2020-29130, it is recommended to update to a patched version of libslirp or upgrade the affected software packages.