In libslirp 4
In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.
Exploitability
AV:N
AC:H
PR:N
UI:N
Scope
S:U
Impact
C:L
I:L
A:L
5.6/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L