CVE-2020-29129: Debian Linux

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.

Affected products

• Debian Debian Linux: version 10.0 only
• Fedoraproject Fedora: version 32 only; version 33 only
• Libslirp Project Libslirp: up to and including 4.3.1

Published 2020-11-26. Last modified 2026-06-17.