Your submission was sent successfully! Close

CVE-2021-3595

Published: 15 June 2021

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could occur while processing a udp packet that is smaller than the size of the 'tftp_t' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.

Priority

Low

CVSS 3 base score: 3.8

Status

Package Release Status
libslirp
Launchpad, Ubuntu, Debian
bionic Does not exist

focal
Released (4.1.0-2ubuntu2.2)
groovy
Released (4.3.1-1ubuntu0.1)
hirsute
Released (4.4.0-1ubuntu0.1)
impish
Released (4.4.0-1ubuntu0.21.10.1)
jammy
Released (4.6.1-1)
trusty Does not exist

upstream Needs triage

xenial Ignored
(out of standard support)
qemu
Launchpad, Ubuntu, Debian
bionic
Released (1:2.11+dfsg-1ubuntu7.37)
focal Not vulnerable
(uses system libslirp)
groovy Not vulnerable
(uses system libslirp)
hirsute Not vulnerable
(uses system libslirp)
impish Not vulnerable
(uses system libslirp)
jammy Not vulnerable
(uses system libslirp)
trusty Needs triage

upstream Needs triage

xenial Needs triage