MEDIUM · 6.5

CVE-2020-10756

An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request...

Vulnerability Description

An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory, resulting in possible information disclosure. This flaw affects versions of libslirp before 4.3.1.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Libslirp ProjectLibslirp< 4.3.1
RedhatOpenstack13
RedhatEnterprise Linux7.0
CanonicalUbuntu Linux16.04
DebianDebian Linux9.0
OpensuseLeap15.0

Related Weaknesses (CWE)

References

FAQ

What is CVE-2020-10756?

CVE-2020-10756 is a vulnerability with a CVSS score of 6.5 (MEDIUM). An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request...

How severe is CVE-2020-10756?

CVE-2020-10756 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-10756?

Check the references section above for vendor advisories and patch information. Affected products include: Libslirp Project Libslirp, Redhat Openstack, Redhat Enterprise Linux, Canonical Ubuntu Linux, Debian Debian Linux.