The vulnerability of the bootp_input() function in the src/bootp.c component of the TCP-IP Libslirp emulator allows a attacker to access confidential data.

The vulnerability of the bootpinput function in the src/bootp.c component of the TCP-IP Libslirp emulator involves access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

SUSE SLES15 Security Update : libslirp (SUSE-SU-2022:1314-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1314-1 advisory. NOTE: this update was retracted, as the bootp fix was incorrect and breaks DHCP usage in qemu. - CVE-2021-3592: Fixed invalid point...

Information Disclosure

libslirp is vulnerable to information disclosure. The flaw exists in the bootpinput function and could occur while processing a udp packet that is smaller than the size of the 'bootpt' structure. A malicious guest could use this flaw to leak 10 bytes of uninitialized heap memory from the host...