Description
slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://lists.freedesktop.org/archives/slirp/2020-November/000115.html ↗
- http://www.openwall.com/lists/oss-security/2020/11/27/1 ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPCOHDEONMHH6QPJZKRLLCNRGRYODG7X/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45S5IHSWYITJKMRT23HCHJQDI674AMTQ/ ↗
- https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html ↗
- https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html ↗