CVE-2020-7039: debian debian_linux Out-of-bounds Write

Modified

AliasesRHSA-2020:1116RHSA-2020:1344RHSA-2020:1360+4 more

Published 16-01-2020Last modified 04-08-2024

Vulnerability summary

CVE-2020-7039 is a medium (CVSS 6.8) Out-of-bounds Write vulnerability in debian debian_linux. EPSS estimates a 3.57% chance of exploitation in the next 30 days, higher than 89.3% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 5.6, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

3.57%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

16-01-2020
PublishedVulnerability first disclosed.
04-08-2024
Last modifiedVulnerability information updated.

Description

tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds access which can lead to a DoS or potential execute arbitrary code.

CVSS metrics

5 scores · 4 sources · 2 versions

v3.15.6v2.06.8

EPSS trend

Probability

3.57%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

No change 0.00 pp

From 3.57% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat191 products

buildah< 0:1.5-6.gite94b4f9.module+el8.1.0+4908+72a45cef
buildah-debuginfo< 0:1.5-6.gite94b4f9.module+el8.1.0+4908+72a45cef
buildah-debugsource< 0:1.5-6.gite94b4f9.module+el8.1.0+4908+72a45cef
container-selinux< 2:2.94-1.git1e99f1d.module+el8.1.0+3468+011f0ab0
containernetworking-plugins< 0:0.7.4-4.git9ebe139.module+el8.1.0+4908+72a45cef

containernetworking-plugins-debuginfo< 0:0.7.4-4.git9ebe139.module+el8.1.0+4908+72a45cef
containernetworking-plugins-debugsource< 0:0.7.4-4.git9ebe139.module+el8.1.0+4908+72a45cef
containers-common< 1:0.1.32-6.git1715c90.module+el8.1.0+4903+9bde5d6c
fuse-overlayfs< 0:0.3-5.module+el8.1.0+3468+011f0ab0
fuse-overlayfs-debuginfo< 0:0.3-5.module+el8.1.0+3468+011f0ab0
fuse-overlayfs-debugsource< 0:0.3-5.module+el8.1.0+3468+011f0ab0
hivex< 0:1.3.15-7.module+el8.0.0+4084+cceb9f44
hivex-debuginfo< 0:1.3.15-7.module+el8.0.0+4084+cceb9f44
hivex-debugsource< 0:1.3.15-7.module+el8.0.0+4084+cceb9f44
hivex-devel< 0:1.3.15-7.module+el8.0.0+4084+cceb9f44
libguestfs< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-bash-completion< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-benchmarking< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-benchmarking-debuginfo< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-debuginfo< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-debugsource< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-devel< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-gfs2< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-gobject< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-gobject-debuginfo< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-gobject-devel< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-inspect-icons< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-java< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-java-debuginfo< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-java-devel< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-javadoc< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-man-pages-ja< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-man-pages-uk< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-rescue< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-rsync< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-tools< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-tools-c< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-tools-c-debuginfo< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libguestfs-winsupport< 0:8.0-3.module+el8.0.0+4084+cceb9f44
libguestfs-xfs< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
libiscsi< 0:1.18.0-7.module+el8.0.0+4084+cceb9f44
libiscsi-debuginfo< 0:1.18.0-7.module+el8.0.0+4084+cceb9f44
libiscsi-debugsource< 0:1.18.0-7.module+el8.0.0+4084+cceb9f44
libiscsi-devel< 0:1.18.0-7.module+el8.0.0+4084+cceb9f44
libiscsi-utils< 0:1.18.0-7.module+el8.0.0+4084+cceb9f44
libiscsi-utils-debuginfo< 0:1.18.0-7.module+el8.0.0+4084+cceb9f44
libssh2< 0:1.8.0-8.module+el8.0.0+4084+cceb9f44.1
libssh2-debuginfo< 0:1.8.0-8.module+el8.0.0+4084+cceb9f44.1
libssh2-debugsource< 0:1.8.0-8.module+el8.0.0+4084+cceb9f44.1
libvirt< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-admin< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-admin-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-bash-completion< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-client< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-client-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-config-network< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-config-nwfilter< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-interface< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-interface-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-network< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-network-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-nodedev< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-nodedev-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-nwfilter< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-nwfilter-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-qemu< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-qemu-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-secret< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-secret-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-storage< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-storage-core< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-storage-core-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-storage-disk< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-storage-disk-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-storage-gluster< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-storage-gluster-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-storage-iscsi< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-storage-iscsi-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-storage-logical< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-storage-logical-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-storage-mpath< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-storage-mpath-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-storage-rbd< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-storage-rbd-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-storage-scsi< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-driver-storage-scsi-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-daemon-kvm< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-dbus< 0:1.2.0-3.module+el8.0.0+4084+cceb9f44
libvirt-dbus-debuginfo< 0:1.2.0-3.module+el8.0.0+4084+cceb9f44
libvirt-dbus-debugsource< 0:1.2.0-3.module+el8.0.0+4084+cceb9f44
libvirt-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-debugsource< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-devel< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-docs< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-libs< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-libs-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-lock-sanlock< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-lock-sanlock-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-nss< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-nss-debuginfo< 0:4.5.0-24.3.module+el8.0.0+4084+cceb9f44
libvirt-python< 0:4.5.0-2.module+el8.0.0+4084+cceb9f44
libvirt-python-debugsource< 0:4.5.0-2.module+el8.0.0+4084+cceb9f44
lua-guestfs< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
lua-guestfs-debuginfo< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
nbdkit< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
nbdkit-bash-completion< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
nbdkit-basic-plugins< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
nbdkit-basic-plugins-debuginfo< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
nbdkit-debuginfo< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
nbdkit-debugsource< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
nbdkit-devel< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
nbdkit-example-plugins< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
nbdkit-example-plugins-debuginfo< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
nbdkit-plugin-gzip< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
nbdkit-plugin-gzip-debuginfo< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
nbdkit-plugin-python-common< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
nbdkit-plugin-python3< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
nbdkit-plugin-python3-debuginfo< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
nbdkit-plugin-vddk< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
nbdkit-plugin-vddk-debuginfo< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
nbdkit-plugin-xz< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
nbdkit-plugin-xz-debuginfo< 0:1.4.2-5.module+el8.0.0+4084+cceb9f44
netcf< 0:0.2.8-11.module+el8.0.0+4084+cceb9f44
netcf-debuginfo< 0:0.2.8-11.module+el8.0.0+4084+cceb9f44
netcf-debugsource< 0:0.2.8-11.module+el8.0.0+4084+cceb9f44
netcf-devel< 0:0.2.8-11.module+el8.0.0+4084+cceb9f44
netcf-libs< 0:0.2.8-11.module+el8.0.0+4084+cceb9f44
netcf-libs-debuginfo< 0:0.2.8-11.module+el8.0.0+4084+cceb9f44
oci-systemd-hook< 1:0.1.15-2.git2d0b8a3.module+el8.1.0+3468+011f0ab0
oci-systemd-hook-debuginfo< 1:0.1.15-2.git2d0b8a3.module+el8.1.0+3468+011f0ab0
oci-systemd-hook-debugsource< 1:0.1.15-2.git2d0b8a3.module+el8.1.0+3468+011f0ab0
oci-umount< 2:2.3.4-2.git87f9237.module+el8.1.0+3468+011f0ab0
oci-umount-debuginfo< 2:2.3.4-2.git87f9237.module+el8.1.0+3468+011f0ab0
oci-umount-debugsource< 2:2.3.4-2.git87f9237.module+el8.1.0+3468+011f0ab0
perl-hivex< 0:1.3.15-7.module+el8.0.0+4084+cceb9f44
perl-hivex-debuginfo< 0:1.3.15-7.module+el8.0.0+4084+cceb9f44
perl-Sys-Guestfs< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
perl-Sys-Guestfs-debuginfo< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
perl-Sys-Virt< 0:4.5.0-5.module+el8.0.0+4084+cceb9f44
perl-Sys-Virt-debuginfo< 0:4.5.0-5.module+el8.0.0+4084+cceb9f44
perl-Sys-Virt-debugsource< 0:4.5.0-5.module+el8.0.0+4084+cceb9f44
podman< 0:1.0.0-4.git921f98f.module+el8.1.0+4908+72a45cef
podman-debuginfo< 0:1.0.0-4.git921f98f.module+el8.1.0+4908+72a45cef
podman-debugsource< 0:1.0.0-4.git921f98f.module+el8.1.0+4908+72a45cef
podman-docker< 0:1.0.0-4.git921f98f.module+el8.1.0+4908+72a45cef
python3-hivex< 0:1.3.15-7.module+el8.0.0+4084+cceb9f44
python3-hivex-debuginfo< 0:1.3.15-7.module+el8.0.0+4084+cceb9f44
python3-libguestfs< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
python3-libguestfs-debuginfo< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
python3-libvirt< 0:4.5.0-2.module+el8.0.0+4084+cceb9f44
python3-libvirt-debuginfo< 0:4.5.0-2.module+el8.0.0+4084+cceb9f44
qemu-guest-agent< 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-guest-agent-debuginfo< 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-img< 10:1.5.3-173.el7 | < 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-img-debuginfo< 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm< 10:1.5.3-173.el7 | < 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm-block-curl< 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm-block-curl-debuginfo< 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm-block-gluster< 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm-block-gluster-debuginfo< 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm-block-iscsi< 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm-block-iscsi-debuginfo< 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm-block-rbd< 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm-block-rbd-debuginfo< 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm-block-ssh< 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm-block-ssh-debuginfo< 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm-common< 10:1.5.3-173.el7 | < 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm-common-debuginfo< 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm-core< 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm-core-debuginfo< 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm-debuginfo< 10:1.5.3-173.el7 | < 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm-debugsource< 15:2.12.0-65.module+el8.0.0+5945+f9bf9a3e.6
qemu-kvm-tools< 10:1.5.3-173.el7
ruby-hivex< 0:1.3.15-7.module+el8.0.0+4084+cceb9f44
ruby-hivex-debuginfo< 0:1.3.15-7.module+el8.0.0+4084+cceb9f44
ruby-libguestfs< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
ruby-libguestfs-debuginfo< 1:1.38.4-11.1.module+el8.0.0+4084+cceb9f44
runc< 0:1.0.0-56.rc5.dev.git2abd837.module+el8.1.0+4908+72a45cef
runc-debuginfo< 0:1.0.0-56.rc5.dev.git2abd837.module+el8.1.0+4908+72a45cef
runc-debugsource< 0:1.0.0-56.rc5.dev.git2abd837.module+el8.1.0+4908+72a45cef
seabios< 0:1.11.1-4.module+el8.0.0+4084+cceb9f44
seabios-bin< 0:1.11.1-4.module+el8.0.0+4084+cceb9f44
seavgabios-bin< 0:1.11.1-4.module+el8.0.0+4084+cceb9f44
sgabios< 1:0.20170427git-3.module+el8.0.0+4084+cceb9f44
sgabios-bin< 1:0.20170427git-3.module+el8.0.0+4084+cceb9f44
skopeo< 1:0.1.32-6.git1715c90.module+el8.1.0+4903+9bde5d6c
skopeo-debuginfo< 1:0.1.32-6.git1715c90.module+el8.1.0+4903+9bde5d6c
skopeo-debugsource< 1:0.1.32-6.git1715c90.module+el8.1.0+4903+9bde5d6c
slirp4netns< 0:0.1-4.dev.gitc4e1bc5.module+el8.1.0+5654+5237a55d

Show all 191

Debian4 products

libslirp< 4.1.0-2
qemu< 1:2.1+dfsg-12+deb8u13 | < 1:4.1-2
slirp< 1:1.0.17-7+deb8u1 | < 1:1.0.17-10
debian_linuxEOL8.0 | 9.0

Ubuntu2 products

qemu< 2.0.0+dfsg-2ubuntu1.47+esm4 | < 1:2.5+dfsg-5ubuntu10.43 | < 1:2.11+dfsg-1ubuntu7.23
slirp< 1:1.0.17-7+deb8u2build0.14.04.1+esm1 | < 1:1.0.17-8ubuntu16.04.1 | < 1:1.0.17-8ubuntu18.04.1

Libslirp_project1 product