libslirp out-of-bounds read leaks host memory in ICMP errors
Virtual machine or container network parts can leak host memory contents.
Summary
A flaw in libslirp's icmp_forward_error() can read memory past a truncated or malformed packet, leaking host memory to a guest or container. Red Hat Enterprise Linux 8, 9 and 10 and OpenShift Container Platform 4 and 5 are listed as affected.
What to do
We have not confirmed a fixed version yet. Check the source links below.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen