Lucene search
Alpine Linux Development TeamALPINE:CVE-2021-3592HistoryJun 15, 2021 - 9:15 p.m.
CVE-2021-3592
2021-06-1521:15:00
Alpine Linux Development Team
security.alpinelinux.org
17
0.0005 Low
EPSS
Percentile
16.5%
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() function and could occur while processing a udp packet that is smaller than the size of the ‘bootp_t’ structure. A malicious guest could use this flaw to leak 10 bytes of uninitialized heap memory from the host. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | libslirp | < 4.6.0-r0 | UNKNOWN |
| Alpine | 3.14-community | noarch | libslirp | < 4.6.0-r0 | UNKNOWN |
| Alpine | 3.15-community | noarch | libslirp | < 4.6.0-r0 | UNKNOWN |
| Alpine | 3.16-community | noarch | libslirp | < 4.6.0-r0 | UNKNOWN |
| Alpine | 3.17-community | noarch | libslirp | < 4.6.0-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | libslirp | < 4.6.0-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | libslirp | < 4.6.0-r0 | UNKNOWN |
Related
ubuntucve
ubuntucve
CVE-2021-3592
2021-06-15 00:00:00
cvelist
cvelist
CVE-2021-3592
2021-06-15 00:00:00
veracode
veracode
Information Disclosure
2021-06-16 00:02:43
osv
osv
CVE-2021-3592
2021-06-15 21:15:09
libslirp vulnerabilities
2021-07-15 17:23:21
debian
debian
[SECURITY] [DLA 2753-2] qemu regression update
2021-09-11 22:11:49
[SECURITY] [DLA 2753-1] qemu security update
2021-09-02 18:40:28
[SECURITY] [DLA 3362-1] qemu security update
2023-03-14 21:02:18
debiancve
debiancve
CVE-2021-3592
2021-06-15 21:15:00
cve
cve
CVE-2021-3592
2021-06-15 21:15:00
prion
prion
Design/Logic Flaw
2021-06-15 21:15:00
redhatcve
redhatcve
CVE-2021-3592
2021-06-15 13:47:02
suse
suse
Security update for libslirp (important)
2022-04-29 00:00:00
Security update for libslirp (important)
2022-05-18 00:00:00
Security update for libslirp (low)
2022-04-22 00:00:00
openvas
openvas
openSUSE: Security Advisory for libslirp (SUSE-SU-2022:1730-1)
2022-05-21 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1314-1)
2022-04-25 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1465-1)
2022-04-29 00:00:00
nessus
nessus
SUSE SLES15 Security Update : libslirp (SUSE-SU-2022:1314-1)
2022-04-23 00:00:00
SUSE SLES15 Security Update : libslirp (SUSE-SU-2022:1730-1)
2022-05-19 00:00:00
SUSE SLES15 Security Update : libslirp (SUSE-SU-2022:1465-1)
2022-04-30 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: libslirp-4.4.0-4.fc34
2021-07-04 01:07:58
[SECURITY] Fedora 33 Update: libslirp-4.3.1-5.fc33
2021-07-04 01:09:15
mageia
mageia
Updated libslirp packages fix security vulnerability
2021-10-21 00:28:32
gentoo
gentoo
libslirp: Multiple vulnerabilities
2021-07-20 00:00:00
archlinux
archlinux
[ASA-202106-49] libslirp: information disclosure
2021-06-22 00:00:00
amazon
amazon
Low: qemu
2023-07-20 17:29:00
ubuntu
ubuntu
libslirp vulnerabilities
2021-07-15 00:00:00
libslirp vulnerabilities
2021-10-26 00:00:00
QEMU vulnerabilities
2021-07-15 00:00:00
rocky
rocky
virt:rhel and virt-devel:rhel security, bug fix, and enhancement update
2021-11-09 08:35:34
oraclelinux
oraclelinux
virt:ol and virt-devel:ol security, bug fix, and enhancement update
2021-11-16 00:00:00
qemu security update
2022-01-04 00:00:00
virt:kvm_utils security update
2022-02-25 00:00:00
redhat
redhat
almalinux
almalinux