CVE-2021-3592

2021-06-15T13:47:02
ID RH:CVE-2021-3592
Type redhatcve
Reporter redhat.com
Modified 2021-07-06T15:17:19

Description

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() function and could occur while processing a udp packet that is smaller than the size of the 'bootp_t' structure. A malicious guest could use this flaw to leak 10 bytes of uninitialized heap memory from the host. The highest threat from this vulnerability is to data confidentiality.