Lucene search
Veracode Vulnerability DatabaseVERACODE:30968HistoryJun 16, 2021 - 12:02 a.m.
Information Disclosure
2021-06-1600:02:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
EPSS
0.001
Percentile
16.3%
libslirp is vulnerable to information disclosure. An invalid pointer initialization in tftp_input() function while processing a UDP packet that is smaller than the size of the tftp_t structure leads to an out-of-bounds read access.
References
bugzilla.redhat.com/show_bug.cgi?id=1970489
lists.debian.org/debian-lts-announce/2021/09/msg00000.html
lists.fedoraproject.org/archives/list/[email protected]/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/
lists.fedoraproject.org/archives/list/[email protected]/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/
secdb.alpinelinux.org/edge/community.yaml
security.gentoo.org/glsa/202107-44
security.netapp.com/advisory/ntap-20210805-0004/
Related
nvd
nvd
CVE-2021-3595
2021-06-15 21:15:10
redhatcve
redhatcve
CVE-2021-3595
2021-06-15 13:47:09
osv
osv
CVE-2021-3595
2021-06-15 21:15:10
qemu - security update
2021-09-01 00:00:00
libslirp vulnerabilities
2021-07-15 17:23:21
cvelist
cvelist
CVE-2021-3595
2021-06-15 00:00:00
debiancve
debiancve
CVE-2021-3595
2021-06-15 21:15:10
cve
cve
CVE-2021-3595
2021-06-15 21:15:10
alpinelinux
alpinelinux
CVE-2021-3595
2021-06-15 21:15:10
prion
prion
Out-of-bounds
2021-06-15 21:15:00
ubuntucve
ubuntucve
CVE-2021-3595
2021-06-15 00:00:00
nessus
nessus
SUSE SLES15 Security Update : libslirp (SUSE-SU-2022:1314-1)
2022-04-23 00:00:00
SUSE SLES15 Security Update : libslirp (SUSE-SU-2022:1465-1)
2022-04-30 00:00:00
SUSE SLES15 Security Update : libslirp (SUSE-SU-2022:1730-1)
2022-05-19 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:1465-1)
2022-04-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1314-1)
2022-04-25 00:00:00
openSUSE: Security Advisory for libslirp (SUSE-SU-2022:1730-1)
2022-05-21 00:00:00
suse
suse
Security update for libslirp (important)
2022-05-18 00:00:00
Security update for libslirp (important)
2022-04-29 00:00:00
Security update for libslirp (low)
2022-04-22 00:00:00
archlinux
archlinux
[ASA-202106-49] libslirp: information disclosure
2021-06-22 00:00:00
gentoo
gentoo
libslirp: Multiple vulnerabilities
2021-07-20 00:00:00
mageia
mageia
Updated libslirp packages fix security vulnerability
2021-10-21 00:28:32
fedora
fedora
[SECURITY] Fedora 34 Update: libslirp-4.4.0-4.fc34
2021-07-04 01:07:58
[SECURITY] Fedora 33 Update: libslirp-4.3.1-5.fc33
2021-07-04 01:09:15
amazon
amazon
Low: qemu
2023-07-20 17:29:00
ubuntu
ubuntu
libslirp vulnerabilities
2021-07-15 00:00:00
libslirp vulnerabilities
2021-10-26 00:00:00
QEMU vulnerabilities
2021-07-15 00:00:00
debian
debian
[SECURITY] [DLA 2753-1] qemu security update
2021-09-02 18:40:09
[SECURITY] [DLA 3362-1] qemu security update
2023-03-14 21:01:53
redhat
redhat
oraclelinux
oraclelinux
virt:ol and virt-devel:ol security, bug fix, and enhancement update
2021-11-16 00:00:00
qemu security update
2022-01-04 00:00:00
virt:kvm_utils security update
2022-02-25 00:00:00
rocky
rocky
virt:rhel and virt-devel:rhel security, bug fix, and enhancement update
2021-11-09 08:35:34
almalinux
almalinux