CVE-2020-29130: Medium severity Libslirp Project Libslirp vulnerability
An out-of-bounds access issue was found in the SLiRP user networking implementation of QEMU. It could occur while processing ARP/NCSI packets, if the packet length was shorter than required to accommodate respective protocol headers and payload. A privileged guest user may use this flaw to potentially leak host information bytes.
Other sources
slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libslirpto a version that resolves this vulnerability.Fixed in 4.4.0-1+deb11u2Fixed in 4.7.0-1Fixed in 4.8.0-1 - Upgrade
Upgrade
debian/qemuto a version that resolves this vulnerability.Fixed in 1:5.2+dfsg-11+deb11u3Fixed in 1:5.2+dfsg-11+deb11u2Fixed in 1:7.2+dfsg-7+deb12u12Fixed in 1:10.0.0~rc2+ds-2Fixed in 1:10.0.0~rc3+ds-2 - Upgrade
Upgrade
alpine/libslirpto a version that resolves this vulnerability.Fixed in 4.4.0-r0
Event History
Frequently Asked Questions
What is CVE-2020-29130?
CVE-2020-29130 is an out-of-bounds access issue in the SLiRP user networking implementation of QEMU.
What software is affected by CVE-2020-29130?
The affected software includes libslirp versions up to and including 4.3.1, Debian Linux 9.0, Fedora 32 and 33.
How can a privileged guest user exploit CVE-2020-29130?
A privileged guest user can exploit CVE-2020-29130 by triggering an out-of-bounds access issue during the processing of ARP/NCSI packets.
How severe is CVE-2020-29130?
CVE-2020-29130 has a severity rating of 4.3, which is considered medium.
How can I fix CVE-2020-29130?
To fix CVE-2020-29130, it is recommended to update to a patched version of libslirp or upgrade the affected software packages.