REDHAT-BUG-1902231: Low severity Qemu Qemu vulnerability
An out-of-bounds access issue was found in the SLiRP user networking implementation of QEMU. It could occur while processing ARP/NCSI packets, if the packet length was shorter than required to accommodate respective protocol headers and payload. A privileged guest user may use this flaw to potentially leak host information bytes.
Upstream patch: --------------- -> https://lists.freedesktop.org/archives/slirp/2020-November/000115.html
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1902231?
The severity of REDHAT-BUG-1902231 is classified as high due to potential exploitation by a privileged guest user.
How do I fix REDHAT-BUG-1902231?
To fix REDHAT-BUG-1902231, you should apply the latest security patches provided by the QEMU project.
What systems are affected by REDHAT-BUG-1902231?
REDHAT-BUG-1902231 affects systems running QEMU with the SLiRP user networking implementation.
What is the nature of the flaw in REDHAT-BUG-1902231?
The flaw in REDHAT-BUG-1902231 is an out-of-bounds access issue occurring in the processing of ARP/NCSI packets.
Can an attacker exploit REDHAT-BUG-1902231 remotely?
No, an attacker must have privileged guest access to exploit REDHAT-BUG-1902231.