EUVD-2026-108518

A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions where the normal ICMP socket is unavailable, this length mismatch causes the host's real IP address to be leaked to the guest ...

DEBIAN-CVE-2026-115449

A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions where the normal ICMP socket is unavailable, this length mismatch causes the host's real IP address to be leaked to the guest ...

CVE-2026-115449

A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions where the normal ICMP socket is unavailable, this length mismatch causes the host's real IP address to be leaked to the guest ...

CVE-2026-115449

A flaw exists in libslirp where the reply length is not updated to match the actual data received from the host during ICMP echo request handling. When the normal ICMP socket is unavailable, this length desynchronization causes the host's real IP address to be leaked to the guest, compromising th...

CVE-2026-115449 Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest

A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions where the normal ICMP socket is unavailable, this length mismatch causes the host's real IP address to be leaked to the guest ...

CVE-2026-115449

A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions where the normal ICMP socket is unavailable, this length mismatch causes the host's real IP address to be leaked to the guest ...

CVE-2026-115449

A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions where the normal ICMP socket is unavailable, this length mismatch causes the host's real IP address to be leaked to the guest ...

PT-2026-121666

A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions where the normal ICMP socket is unavailable, this length mismatch causes the host's real IP address to be leaked to the guest ...

CVE-2026-95508 affecting package libslirp for versions less than 4.9.5-1

CVE-2026-95508 affecting package libslirp for versions less than 4.9.5-1. An upgraded version of the package is available that resolves this issue...

libslirp-devel-4.9.5+1-1.1 on GA media (moderate)

libslirp-devel-4.9.5+1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11922-1 Rating: moderate Cross-References: CVE-2026-95507 CVSS scores: CVE-2026-95507 SUSE : 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2026-95507 SUSE : 5.1...

Rocky Linux 8 [CIQ] Security Update: libslirp / libslirp-debuginfo / libslirp-debugsource / etc Multiple Vulnerabilities (crlsa-2020_4694)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204694 advisory. containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters CVE-2020-10749 QEMU: slirp: networking out-of-bounds read...

Rocky Linux 8.6 [CIQ] Security Update: libslirp / libslirp-devel Multiple Vulnerabilities (ciqsa-2026_1303)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261303 advisory. This advisory aggregates security fixes for the libslirp SRPM in CIQ LTS 8.6. It addresses 5 CVEs: CVE-2025-52881, CVE-2025-6032, CVE-2025-9566,...

Rocky Linux 8.6 [CIQ] Security Update: libslirp / libslirp-debuginfo / libslirp-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0899)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260899 advisory. This advisory aggregates security fixes for the libslirp SRPM in CIQ LTS 8.6. It addresses 20 CVEs: CVE-2022-41723, CVE-2022-41724, CVE-2022-2990,...

Rocky Linux 8.8 [CIQ] Security Update: libslirp / libslirp-debuginfo / libslirp-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0788)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260788 advisory. This advisory aggregates security fixes for the libslirp SRPM in CIQ LTS 8.8. It addresses 39 CVEs: CVE-2022-3064, CVE-2023-25809, CVE-2022-32189,...

Rocky Linux 8.6 [CIQ] Security Update: libslirp / libslirp-debuginfo / libslirp-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0846)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260846 advisory. This advisory aggregates security fixes for the libslirp SRPM in CIQ LTS 8.6. It addresses 37 CVEs: CVE-2022-3064, CVE-2023-25809, CVE-2022-32189,...

Rocky Linux 8.6 [CIQ] Security Update: libslirp / libslirp-debuginfo / libslirp-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0085)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260085 advisory. This advisory aggregates security fixes for the libslirp SRPM in CIQ LTS 8.6. It addresses 40 CVEs: CVE-2018-25091, CVE-2024-34155, CVE-2024-1394,...

Rocky Linux 8.6 [CIQ] Security Update: libslirp / libslirp-debuginfo / libslirp-debugsource / etc (ciqsa-2026_1079)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261079 advisory. This advisory aggregates security fixes for the libslirp SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding description...

OPENSUSE-SU-2026:11922-1 libslirp-devel-4.9.5+1-1.1 on GA media

These are all security issues fixed in the libslirp-devel-4.9.5+1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-105631

These are all security issues fixed in the libslirp-devel-4.9.5+1-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2026-95508

A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option can overflow the reply buffer with attacker-controlled content and length, resulting ...