Search CVE reports
1 – 10 of 16 results
A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option can overflow the...
1 affected package
libslirp
| Package | 16.04 LTS |
|---|---|
| libslirp | — |
An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g., QEMU) allows a privileged guest VM attacker...
1 affected package
libslirp
| Package | 16.04 LTS |
|---|---|
| libslirp | — |
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could occur while processing a udp packet that is smaller than the size of the...
2 affected packages
libslirp, qemu
| Package | 16.04 LTS |
|---|---|
| libslirp | Not in release |
| qemu | Not affected |
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the...
2 affected packages
libslirp, qemu
| Package | 16.04 LTS |
|---|---|
| libslirp | Not in release |
| qemu | Fixed |
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the...
2 affected packages
libslirp, qemu
| Package | 16.04 LTS |
|---|---|
| libslirp | Not in release |
| qemu | Not affected |
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() function and could occur while processing a udp packet that is smaller than the size of the...
2 affected packages
libslirp, qemu
| Package | 16.04 LTS |
|---|---|
| libslirp | Not in release |
| qemu | Fixed |
slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
3 affected packages
libslirp, qemu, qemu-kvm
| Package | 16.04 LTS |
|---|---|
| libslirp | Not in release |
| qemu | Not affected |
| qemu-kvm | Not in release |
ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
3 affected packages
libslirp, qemu, qemu-kvm
| Package | 16.04 LTS |
|---|---|
| libslirp | Not in release |
| qemu | Not affected |
| qemu-kvm | Not in release |
An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request, also known as ping. This...
4 affected packages
libslirp, qemu, qemu-kvm, slirp4netns
| Package | 16.04 LTS |
|---|---|
| libslirp | Not in release |
| qemu | Not affected |
| qemu-kvm | Not in release |
| slirp4netns | Not in release |