CVE-2020-8608
Publication date 6 February 2020
Last updated 24 July 2024
Ubuntu priority
Cvss 3 Severity Score
In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.
From the Ubuntu Security Team
It was discovered that the SLiRP networking implementation of the QEMU emulator misuses snprintf return values. An attacker could use this to cause a denial of service (application crash) or potentially execute arbitrary code.
Status
Package | Ubuntu Release | Status |
---|---|---|
libslirp | 24.04 LTS noble |
Fixed 4.1.0-2ubuntu1
|
22.04 LTS jammy |
Fixed 4.1.0-2ubuntu1
|
|
20.04 LTS focal |
Fixed 4.1.0-2ubuntu1
|
|
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
qemu | 24.04 LTS noble |
Not affected
|
22.04 LTS jammy |
Not affected
|
|
20.04 LTS focal |
Not affected
|
|
18.04 LTS bionic |
Fixed 1:2.11+dfsg-1ubuntu7.23
|
|
16.04 LTS xenial |
Fixed 1:2.5+dfsg-5ubuntu10.43
|
|
14.04 LTS trusty |
Needs evaluation
|
|
qemu-kvm | 24.04 LTS noble | Not in release |
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
slirp | 24.04 LTS noble |
Vulnerable
|
22.04 LTS jammy |
Vulnerable
|
|
20.04 LTS focal |
Vulnerable
|
|
18.04 LTS bionic |
Fixed 1:1.0.17-8ubuntu18.04.1
|
|
16.04 LTS xenial |
Fixed 1:1.0.17-8ubuntu16.04.1
|
|
14.04 LTS trusty |
Fixed 1:1.0.17-7+deb8u2build0.14.04.1+esm1
|
|
slirp4netns | 24.04 LTS noble |
Not affected
|
22.04 LTS jammy |
Not affected
|
|
20.04 LTS focal |
Needs evaluation
|
|
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release |
Get expanded security coverage with Ubuntu Pro
Reduce your average CVE exposure time from 98 days to 1 day with expanded CVE patching, ten-years security maintenance and optional support for the full stack of open-source applications. Free for personal use.
Get Ubuntu ProNotes
mdeslaur
possible better approach would be to disable tcp_emu completely https://gitlab.freedesktop.org/slirp/libslirp/commit/07c2a44b67e219ac14207f7a1b33704e1312cf91
Severity score breakdown
Parameter | Value |
---|---|
Base score | 5.6 · Medium |
Attack vector | Network |
Attack complexity | High |
Privileges required | None |
User interaction | None |
Scope | Unchanged |
Confidentiality | Low |
Integrity impact | Low |
Availability impact | Low |
Vector | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L |
References
Related Ubuntu Security Notices (USN)
- USN-4283-1
- QEMU vulnerabilities
- 18 February 2020
- USN-4632-1
- SLiRP vulnerabilities
- 12 November 2020