CVE-2020-29129

Name of the Vulnerable Software and Affected Versions libslirp versions 4.3.1 and earlier

Description The issue is related to a buffer over-read in the ncsi.c component of the libslirp TCP-IP emulator. This occurs because the component attempts to read a certain amount of header data even if it exceeds the total packet length. Exploitation of this issue may allow a remote attacker to access confidential data.

Recommendations For libslirp versions 4.3.1 and earlier, consider applying a patch or updating to a version where this issue is fixed, if available. As a temporary workaround, consider restricting access to the ncsi.c component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.