CVE-2020-8608

22

FAUCET Score

CVE-2020-8608 describes a buffer overflow vulnerability in libslirp 4.1.0, specifically within the tcp_subr.c file due to incorrect snprintf return value handling. This flaw impacts products like QEMU 4.2.0 and various Debian and openSUSE distributions. Rated MEDIUM with a CVSS score of 5.6, the vulnerability can be exploited remotely with high attack complexity, potentially leading to limited confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		4.1.0CPE matchmatch criteria	cpe:2.3:a:libslirp_project:libslirp:4.1.0:::::::*
		8.0CPE matchmatch criteria	cpe:2.3:o:debian:debian_linux:8.0:::::::*
		9.0CPE matchmatch criteria	cpe:2.3:o:debian:debian_linux:9.0:::::::*
		10.0CPE matchmatch criteria	cpe:2.3:o:debian:debian_linux:10.0:::::::*
		15.1CPE matchmatch criteria	cpe:2.3:o:opensuse:leap:15.1:::::::*

CVSS Data

CVSS version used by this source: 3.1

5.6MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

Exploitability Score

2.2

Impact Score

3.4

CvssVersion

3.1

Exploit Intelligence

EPSS Score

2.49%

Probability of exploitation in next 30 days

EPSS Percentile

82.9%

Percentile rank of EPSS score among Peer Group

As of 2026-07-25

Model: v2026.06.15

This CVE's current EPSS score of 0.0249 is in the 73rd percentile among its peer group of 19,954 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (36)

redhatpatch availablevia redhat_api

Product: Advanced Virtualization for RHEL 8.1.1Fixed in: virt:8.1-8010120200304224358.5db1954d

redhatpatch availablevia redhat_api

Product: Advanced Virtualization for RHEL 8.1.1Fixed in: virt-devel:8.1-8010120200304224358.5db1954d

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: qemu-kvm-2:0.12.1.2-2.506.el6_10.7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: qemu-kvm-10:1.5.3-173.el7_8.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: qemu-kvm-ma-10:2.12.0-44.el7_8.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.6 Extended Update SupportFixed in: qemu-kvm-10:1.5.3-160.el7_6.7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.7 Extended Update SupportFixed in: qemu-kvm-10:1.5.3-167.el7_7.6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.7 Extended Update SupportFixed in: qemu-kvm-ma-10:2.12.0-33.el7_7.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7 ExtrasFixed in: slirp4netns-0:0.3.0-8.el7_7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: container-tools:rhel8-8010120200326094405.f8993c42

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: virt-devel:rhel-8020020200601195459.4cda2c84

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: virt:rhel-8020020200601195459.4cda2c84

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.0 Update Services for SAP SolutionsFixed in: virt:rhel-8000020200526192422.f8e95b4e

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.1 Extended Update SupportFixed in: virt-devel:rhel-8010020200526033036.c27ad7f8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.1 Extended Update SupportFixed in: virt:rhel-8010020200526033036.c27ad7f8

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.3Fixed in: atomic-enterprise-service-catalog-1:4.3.3-202002170501.git.1.f30799e.el7

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.3Fixed in: atomic-openshift-service-idler-0:4.3.3-202002170501.git.1.4feff9c.el7

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.3Fixed in: cri-o-0:1.16.3-22.dev.rhaos4.3.git11c04e3.el8

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.3Fixed in: cri-tools-0:1.17.0-1.el8

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.3Fixed in: dracut-0:049-64.git20200123.el8

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.3Fixed in: jenkins-0:2.204.1.1581950993-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.3Fixed in: jenkins-2-plugins-0:4.3.1581956184-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.3Fixed in: machine-config-daemon-0:4.3.3-202002170501.git.1.6b1b155.el8

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.3Fixed in: openshift-0:4.3.3-202002140552.git.0.e38059c.el7

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.3Fixed in: openshift-ansible-0:4.3.3-202002142331.git.173.bb0b5a1.el7

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.3Fixed in: openshift-clients-0:4.3.3-202002140552.git.1.ff73b47.el7

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.3Fixed in: openshift-kuryr-0:4.3.3-202002170501.git.1.3b8b4cc.el8

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.3Fixed in: slirp4netns-0:0.4.2-4.git21fdece.el8

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.3Fixed in: toolbox-0:0.0.6-1.rhaos4.3.el8

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 10.0 (Newton)Fixed in: qemu-kvm-rhev-10:2.12.0-33.el7_7.10

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: qemu-kvm-rhev-10:2.12.0-44.el7_8.1

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: qemu-kvm-rhev-10:2.12.0-18.el7_6.11

redhatpatch availablevia redhat_api

Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 7Fixed in: qemu-kvm-rhev-10:2.12.0-44.el7_8.1

redhatpatch availablevia redhat_api

Product: Red Hat Virtualization Engine 4.2Fixed in: qemu-kvm-rhev-10:2.12.0-18.el7_6.11

redhatpatch availablevia redhat_api

Product: Red Hat Virtualization Engine 4.3Fixed in: qemu-kvm-rhev-10:2.12.0-44.el7_8.1

redhatno patchvia redhat_api

Product: Red Hat Enterprise Linux 8 Advanced VirtualizationFixed in: qemu-kvm

Vendor Advisories (1)

redhatCVE-2020-8608Important

QEMU: Slirp: potential OOB access due to unsafe snprintf() usages

References

lists.opensuse.org / opensuse-security-announce/2020-04/msg00007.html

Mailing ListThird Party Advisory

gitlab.freedesktop.org / slirp/libslirp/commit/68ccb8021a838066f0951d4b2817eb6b6f10a843

PatchThird Party Advisory

gitlab.freedesktop.org / slirp/libslirp/-/tags/v4.1.0

Release NotesThird Party Advisory

lists.debian.org / debian-lts-announce/2020/03/msg00015.html

Third Party Advisory

lists.debian.org / debian-lts-announce/2020/03/msg00017.html

Third Party Advisory

lists.debian.org / debian-lts-announce/2020/07/msg00020.html

Mailing ListThird Party Advisory

lists.debian.org / debian-lts-announce/2021/02/msg00012.html

Mailing ListThird Party Advisory

security.gentoo.org / glsa/202003-66

Third Party Advisory

security.netapp.com / advisory/ntap-20201001-0002

Third Party Advisory

usn.ubuntu.com / 4283-1

Third Party Advisory

debian.org / security/2020/dsa-4733

Third Party Advisory

openwall.com / lists/oss-security/2020/02/06/2

Mailing ListPatchThird Party Advisory