Published: 15/06/2021 Updated: 07/11/2023

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 3.8 | Impact Score: 1.4 | Exploitability Score: 2

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could occur while processing a udp packet that is smaller than the size of the 'tftp_t' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions before 4.6.0.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libslirp project libslirp
redhat enterprise linux 8.0
debian debian linux 9.0
fedoraproject fedora 33
fedoraproject fedora 34

Debian Bug report logs - #989996 libslirp: CVE-2021-3595 Package: src:libslirp; Maintainer for src:libslirp is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 17 Jun 2021 13:45:09 UTC Severity: important Tags: security, upstream Found in ver ...

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU The flaw exists in the bootp_input() function and could occur while processing a udp packet that is smaller than the size of the 'bootp_t' structure A malicious guest could use this flaw to leak 10 bytes of uninitialized heap memory from the host The ...

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU The flaw exists in the tftp_input() function and could occur while processing a udp packet that is smaller than the size of the 'tftp_t' structure This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest This f ...

About me

👋 About Me I'm a graduate student at Georgetown University in the Security Studies Program at the Walsh School of Foreign Service My academic interests are on the intersection of emerging technology and national security, with a specific focus on state-sponsored cyber network operations and cyber operations policy In my free time, I develop my vulnerability discovery

CWE-824 https://bugzilla.redhat.com/show_bug.cgi?id=1970489 https://security.gentoo.org/glsa/202107-44 https://security.netapp.com/advisory/ntap-20210805-0004/https://lists.debian.org/debian-lts-announce/2021/09/msg00000.html https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989996 https://nvd.nist.gov https://github.com/tcbutler320/tcbutler320 https://alas.aws.amazon.com/AL2/ALAS-2023-2169.html

CVE-2021-3595

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect