CVE-2020-10756

An out-of-bounds read vulnerability was found in the SLiRP networking
implementation of the QEMU emulator. This flaw occurs in the
icmp6_send_echoreply() routine while replying to an ICMP echo request, also
known as ping. This flaw allows a malicious guest to leak the contents of
the host memory, resulting in possible information disclosure. This flaw
affects versions of libslirp before 4.3.1.

Bugs

• <https://bugzilla.redhat.com/show_bug.cgi?id=1835986#c11&gt;