CVE-2020-8608: Debian Linux

Medium severity, CVSS 5.6. EPSS: 2.5% chance of exploitation in the next 30 days.

In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only; version 10.0 only
• Libslirp Project Libslirp: version 4.1.0 only
• Opensuse Leap: version 15.1 only

Published 2020-02-06. Last modified 2026-06-17.