CVE-2021-3592

LOW Year: 2021
CVSS v3 Score
3.8
Low
CVSS v2 Score
2.1
Low
Weakness Type
CWE-824
View all →

Vulnerability Description

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() function and could occur while processing a udp packet that is smaller than the size of the 'bootp_t' structure. A malicious guest could use this flaw to leak 10 bytes of uninitialized heap memory from the host. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.

Related Vulnerabilities

CVE-2021-3593

LOW
CVSS:3.8(Low)

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is sma...

CWE-8242021

CVE-2021-3594

LOW
CVSS:3.8(Low)

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smal...

CWE-8242021

CVE-2021-3595

LOW
CVSS:3.8(Low)

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could occur while processing a udp packet that is sma...

CWE-8242021

CVE-2020-6321

MEDIUM
CVSS:4.3(Medium)

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received from untrusted sources which results in crashing of the application and becoming temporarily unavailab...

CWE-8242020

CVE-2021-35991

LOW
CVSS:3.3(Low)

Adobe Bridge version 11.0.2 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnera...

CWE-8242021

CVE-2021-38205

LOW
CVSS:3.3(Low)

drivers/net/ethernet/xilinx/xilinx_emaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (i.e., the real ...

CWE-8242021