CVE-2020-7039: Debian Linux

Medium severity, CVSS 5.6. EPSS: 3.6% chance of exploitation in the next 30 days.

tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds access which can lead to a DoS or potential execute arbitrary code.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Libslirp Project Libslirp: version 4.1.0 only
• Opensuse Leap: version 15.1 only
• Qemu Qemu: version 4.2.0 only

Published 2020-01-16. Last modified 2026-06-17.