Libslirp Project

Libslirp

13 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.8

CVE-2021-3595

  • EPSS 0.02%
  • Published 15.06.2021 21:15:10
  • Last modified 21.11.2024 06:21:55

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could occur while processing a udp packet that is smaller than the size of the 'tftp_t' structure. This...

3.8

CVE-2021-3592

  • EPSS 0.02%
  • Published 15.06.2021 21:15:09
  • Last modified 21.11.2024 06:21:55

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() function and could occur while processing a udp packet that is smaller than the size of the 'bootp_t' structure. A ...

3.8

CVE-2021-3593

  • EPSS 0.02%
  • Published 15.06.2021 21:15:09
  • Last modified 21.11.2024 06:21:55

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure. This...

3.8

CVE-2021-3594

  • EPSS 0.02%
  • Published 15.06.2021 21:15:09
  • Last modified 21.11.2024 06:21:55

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure. This ...

4.3

CVE-2020-29129

  • EPSS 0.22%
  • Published 26.11.2020 20:15:10
  • Last modified 21.11.2024 05:23:39

ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.

4.3

CVE-2020-29130

Exploit
  • EPSS 0.37%
  • Published 26.11.2020 20:15:10
  • Last modified 21.11.2024 05:23:39

slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.

6.5

CVE-2020-10756

  • EPSS 0.04%
  • Published 09.07.2020 16:15:13
  • Last modified 21.11.2024 04:56:00

An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious...

6.5

CVE-2020-1983

Exploit
  • EPSS 0.19%
  • Published 22.04.2020 20:15:11
  • Last modified 21.11.2024 05:11:47

A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.

6.8

CVE-2020-8608

  • EPSS 1.81%
  • Published 06.02.2020 17:15:14
  • Last modified 21.11.2024 05:39:07

In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.

7.5

CVE-2020-7211

  • EPSS 0.5%
  • Published 21.01.2020 17:15:12
  • Last modified 21.11.2024 05:36:50

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.