An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could occur while processing a udp packet that is smaller than the size of the 'tftp_t' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1970489 | Issue Tracking Patch Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2021/09/msg00000.html | Mailing List Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html | |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/ | |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/ | |
https://security.gentoo.org/glsa/202107-44 | Third Party Advisory |
https://security.netapp.com/advisory/ntap-20210805-0004/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
07 Nov 2023, 03:38
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2021-06-15 21:15
Updated : 2024-02-28 18:28
NVD link : CVE-2021-3595
Mitre link : CVE-2021-3595
CVE.ORG link : CVE-2021-3595
JSON object : View
Products Affected
libslirp_project
- libslirp
debian
- debian_linux
fedoraproject
- fedora
redhat
- enterprise_linux
CWE
CWE-824
Access of Uninitialized Pointer