CVE-2021-3593CWE-824

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU

published June 15, 2021

CVSS
—
EPSS
0%
Percentile
24.4
In the wild
Unconfirmed
What it is

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00326 · 24.4th percentile
Weakness
CWE-824 · Access of Uninitialized Pointer
Published
2021-06-15T00:00Z
EPSS history
Timeline
  • 15 JUN 00:00Z
    An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU
    cvelistv5