Vulnerability CVE-2020-29129

Vulnerability Name:

CVE-2020-29129 (CCN-192365)

Assigned:

2020-11-26

Published:

2020-11-26

Updated:

2022-10-14

Summary:

ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.

CVSS v3 Severity:

4.3 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
3.8 Low (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): None

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
4.6 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): None

2.5 Low (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N)
2.2 Low (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): High Privileges Required (PR): High User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): None

CVSS v2 Severity:

4.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

Vulnerability Type:

CWE-125

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2020-29129

Source: MLIST
Type: Mailing List, Third Party Advisory
[oss-security] 20201127 CVE-2020-29129 CVE-2020-29130 QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets

Source: XF
Type: UNKNOWN
libslirp-cve202029129-info-disc(192365)

Source: MLIST
Type: Mailing List, Third Party Advisory
[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2020-331e1318dd

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2020-77f93f41be

Source: CCN
Type: Freedesktop Web site
[Slirp] [PATCH] slirp: check pkt_len before reading protocol header

Source: MISC
Type: Mailing List, Vendor Advisory
https://lists.freedesktop.org/archives/slirp/2020-November/000115.html

Source: CCN
Type: oss-sec Mailing List, Fri, 27 Nov 2020 18:38:05 +0530 (IST)
CVE-2020-29129 CVE-2020-29130 QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2020-29129

Vulnerable Configuration:

Configuration 1:

cpe:/a:libslirp_project:libslirp:*:*:*:*:*:*:*:* (Version <= 4.3.1)

Configuration 2:

cpe:/o:fedoraproject:fedora:32:*:*:*:*:*:*:*

OR cpe:/o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Configuration 3:

cpe:/o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/a:redhat:enterprise_linux:8:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/a:redhat:enterprise_linux:8::appstream:*:*:*:*:*

Configuration RedHat 3:

cpe:/a:redhat:enterprise_linux:8::crb:*:*:*:*:*

Configuration CCN 1:

cpe:/a:libslirp_project:libslirp:4.3.1:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:8034	P	libpcp-devel-5.2.5-150400.5.3.11 on GA media (Moderate)	2023-06-20
oval:org.opensuse.security:def:7948	P	libmozjs-78-0-78.15.0-150400.1.10 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7961	P	libraw20-0.20.2-150400.3.6.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7963	P	libsmi-devel-0.4.8-1.29 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7791	P	qemu-tools-7.1.0-150500.47.15 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:719	P	Security update for gstreamer-plugins-good (Important)	2022-08-31
oval:org.opensuse.security:def:95275	P	Security update for gdk-pixbuf (Moderate) (in QA)	2022-07-29
oval:org.opensuse.security:def:95283	P	Security update for libxml2 (Important)	2022-07-26
oval:org.opensuse.security:def:3620	P	Security update for xen (Important)	2022-07-06
oval:org.opensuse.security:def:3385	P	tpm2.0-tools-3.1.4-1.12 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3187	P	libidn-tools-1.28-5.6.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3432	P	apache2-mod_jk-1.2.40-7.3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3518	P	guile-2.0.9-9.3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:94544	P	elfutils-0.185-150400.3.35 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:95148	P	qemu-6.2.0-150400.35.10 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:95201	P	libavformat58_76-4.4-150400.1.13 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:94497	P	aspell-0.60.8-3.3.1 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:94817	P	qemu-tools-6.2.0-150400.35.10 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:6043	P	Security update for libyajl (Moderate)	2022-06-14
oval:org.opensuse.security:def:351	P	qemu-6.2.0-150400.35.10 on GA media (Moderate)	2022-06-10
oval:org.opensuse.security:def:6053	P	Security update for postgresql13 (Important)	2022-05-25
oval:org.opensuse.security:def:6052	P	Security update for libxml2 (Important)	2022-05-24
oval:org.opensuse.security:def:101996	P	Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP3) (Important)	2022-02-02
oval:org.opensuse.security:def:101988	P	Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP3) (Important)	2022-02-01
oval:org.opensuse.security:def:99474	P	(Moderate)	2022-01-20
oval:org.opensuse.security:def:113318	P	qemu-6.1.0-32.1 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:99440	P	(Moderate)	2021-12-06
oval:org.opensuse.security:def:106728	P	qemu-6.1.0-32.1 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:97040	P	squid-4.4-5.3.2 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:97041	P	stunnel-5.44-1.29 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:101914	P	Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3) (Important)	2021-08-17
oval:org.opensuse.security:def:99981	P	(Important)	2021-08-16
oval:org.opensuse.security:def:101210	P	libopenjpeg1-1.5.2-2.28 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:101257	P	crash-7.2.9-21.4 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:39062	P	Security update for kvm (Important)	2021-07-29
oval:org.opensuse.security:def:43492	P	Security update for kvm (Important)	2021-07-29
oval:org.opensuse.security:def:110968	P	Security update for qemu (Moderate)	2021-07-14
oval:org.opensuse.security:def:111576	P	Security update for qemu (Important)	2021-07-11
oval:org.opensuse.security:def:67142	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:97059	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:125554	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:33670	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:69123	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:127121	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:73831	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:88139	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:64709	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:59493	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:89148	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:1611	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:23921	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:126724	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:33928	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:51909	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:88452	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:101450	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:59751	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:76210	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:89406	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:8778	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:92134	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:99084	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:75892	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:66824	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:92524	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:69665	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:9724	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:92922	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:10275	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:93228	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:91939	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:98889	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:118496	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:102734	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:8973	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:92325	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:99275	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:76209	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:96044	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:109400	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:9525	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:67141	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:92723	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:99673	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:97051	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:69864	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:69052	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:108662	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:93075	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:5735	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:70415	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:107923	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:64521	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:9338	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:118494	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:102732	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:76200	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:70232	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:96042	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:109398	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:67132	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:8595	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:42084	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:69050	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:108654	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:5727	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:117438	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:69478	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:75884	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:10092	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:66816	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:73643	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:34449	P	Security update for qemu (Important)	2021-06-02
oval:org.opensuse.security:def:60272	P	Security update for qemu (Important)	2021-06-02
oval:org.opensuse.security:def:99639	P	(Important)	2021-06-01
oval:com.redhat.rhsa:def:20211762	P	RHSA-2021:1762: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update (Moderate)	2021-05-18
oval:org.opensuse.security:def:111339	P	Security update for qemu (Important)	2021-04-23
oval:org.opensuse.security:def:9690	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:102719	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:92888	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:99945	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:59458	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:70201	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:89113	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:10241	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:96029	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:109385	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:93194	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:8562	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:60232	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:91901	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:98851	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:42061	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:23885	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:69037	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:108580	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:8935	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:92291	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:99241	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:126689	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:96856	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:5653	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:117391	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:33893	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:69447	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:9491	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:92689	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:51873	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:75810	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:69830	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:88414	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:10061	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:66742	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:93041	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:59716	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:96857	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:70381	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:89371	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:73596	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:107876	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:8740	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:64474	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:92096	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:99046	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:125518	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:33635	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:9307	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:92490	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:127086	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:96858	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:118481	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:34409	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:69631	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:88102	P	Security update for qemu (Important)	2021-04-16

BACK