Skip to content
OpenAdvisories
Unscored USN-5009-1 6 CVEs

libslirp vulnerabilities

Published Jul 15, 2021 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

Qiuhao Li discovered that libslirp incorrectly handled certain header data
lengths. An attacker inside a guest could possibly use this issue to leak
sensitive information from the host. This issue only affected Ubuntu 20.04
LTS and Ubuntu 20.10. (CVE-2020-29129, CVE-2020-29130)

It was discovered that libslirp incorrectly handled certain udp packets. An
attacker inside a guest could possibly use this issue to leak sensitive
information from the host. (CVE-2021-3592, CVE-2021-3593, CVE-2021-3594,
CVE-2021-3595)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS libslirp 4.1.0-2ubuntu2.2

Vulnerabilities 6

References

  • report
    https://ubuntu.com/security/CVE-2020-29129
  • report
    https://ubuntu.com/security/CVE-2020-29130
  • report
    https://ubuntu.com/security/CVE-2021-3592
  • report
    https://ubuntu.com/security/CVE-2021-3593
  • report
    https://ubuntu.com/security/CVE-2021-3594
  • report
    https://ubuntu.com/security/CVE-2021-3595