An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could occur while processing a udp packet that is smaller than the size of the 'tftp_t' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1970489 | Issue Tracking Patch Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2021/09/msg00000.html | Mailing List Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html | |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/ | |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/ | |
https://security.gentoo.org/glsa/202107-44 | Third Party Advisory |
https://security.netapp.com/advisory/ntap-20210805-0004/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
15 Mar 2023, 00:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
CWE |
21 Sep 2021, 17:01
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
|
References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/ - Mailing List, Third Party Advisory | |
References | (CONFIRM) https://security.netapp.com/advisory/ntap-20210805-0004/ - Third Party Advisory | |
References | (GENTOO) https://security.gentoo.org/glsa/202107-44 - Third Party Advisory | |
References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/ - Mailing List, Third Party Advisory | |
References | (MLIST) https://lists.debian.org/debian-lts-announce/2021/09/msg00000.html - Mailing List, Third Party Advisory |
02 Sep 2021, 21:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
05 Aug 2021, 12:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
20 Jul 2021, 11:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
23 Jun 2021, 17:06
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 3.8 |
References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1970489 - Issue Tracking, Patch, Third Party Advisory | |
CPE | cpe:2.3:a:libslirp_project:libslirp:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
|
CWE | CWE-824 |
15 Jun 2021, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-06-15 21:15
Updated : 2024-02-04 21:47
NVD link : CVE-2021-3595
Mitre link : CVE-2021-3595
CVE.ORG link : CVE-2021-3595
JSON object : View
Products Affected
libslirp_project
- libslirp
redhat
- enterprise_linux
debian
- debian_linux
fedoraproject
- fedora
CWE
CWE-824
Access of Uninitialized Pointer