Published: 15/06/2021 Updated: 07/11/2023

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 3.8 | Impact Score: 1.4 | Exploitability Score: 2

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions before 4.6.0.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libslirp project libslirp
redhat enterprise linux 8.0
debian debian linux 9.0
fedoraproject fedora 33
fedoraproject fedora 34

Debian Bug report logs - #989995 libslirp: CVE-2021-3594 Package: src:libslirp; Maintainer for src:libslirp is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 17 Jun 2021 13:45:07 UTC Severity: important Tags: security, upstream Found in ver ...

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU The flaw exists in the bootp_input() function and could occur while processing a udp packet that is smaller than the size of the 'bootp_t' structure A malicious guest could use this flaw to leak 10 bytes of uninitialized heap memory from the host The ...

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest The hig ...

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest This fl ...

CWE-824 https://bugzilla.redhat.com/show_bug.cgi?id=1970491 https://security.gentoo.org/glsa/202107-44 https://security.netapp.com/advisory/ntap-20210805-0004/https://lists.debian.org/debian-lts-announce/2021/09/msg00000.html https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989995 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2023-2169.html

CVE-2021-3594

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect