CVE-2020-7211

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows

published January 21, 2020

CVSS
—
EPSS
4%
Percentile
90.9
In the wild
Unconfirmed
What it is

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04193 · 90.9th percentile
Published
2020-01-21T16:12Z
EPSS history
Timeline
  • 21 JAN 16:12Z
    tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows
    cvelistv5