Skip to content
OpenAdvisories

Package · Ubuntu

libslirp

14 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.5

    Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service

    A flaw was found in libslirp in if_output(). When moving a session from the fast queue to the batch queue, the code unlinked and reinserted an arbitrary packet via ifm->m_nextpkt instead of the session queue head, corrupting queue pointers. A guest generating…

  • Medium 6.5
    CVE-2026-9539 Public exploit

    libslirp TCP URG OOB Read Information Leak

    An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g., QEMU) allows a privileged guest VM attacker (root or CAP_NET_RAW) to leak gig…