Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:1915-1

Опубликовано: 15 июл. 2020
Источник: suse-cvrf

Описание

Security update for slirp4netns

This update for slirp4netns fixes the following issues:

  • Update to 0.4.7 (bsc#1172380)
    • libslirp: update to v4.3.1 (Fix CVE-2020-10756)
    • Fix config_from_options() to correctly enable ipv6

Список пакетов

SUSE Linux Enterprise Module for Containers 15 SP1
slirp4netns-0.4.7-3.12.1
SUSE Linux Enterprise Module for Containers 15 SP2
slirp4netns-0.4.7-3.12.1

Ссылки

Описание

An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory, resulting in possible information disclosure. This flaw affects versions of libslirp before 4.3.1.

Затронутые продукты
SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.4.7-3.12.1
SUSE Linux Enterprise Module for Containers 15 SP2:slirp4netns-0.4.7-3.12.1
Ссылки
Уязвимость SUSE-SU-2020:1915-1