diff options
| author |   Stefan Ghinea <stefan.ghinea@windriver.com> | 2020-08-21 22:47:47 +0300 |
|---|---|---|
| committer |   Richard Purdie <richard.purdie@linuxfoundation.org> | 2020-09-10 13:21:31 +0100 |
| commit | b6d73f9f8c055928051dc57943baf5833568d04f (patch) | |
| tree | aad32fc0ea46c920d348c51dfd252f58565d4bcc /contrib | |
| parent | 4fa2a6c171e62855ad9a2bd7a2d8507067f62988 (diff) | |
| download | openembedded-core-b6d73f9f8c055928051dc57943baf5833568d04f.tar.gz | |
qemu: CVE-2020-10756
An out-of-bounds read vulnerability was found in the SLiRP networking
implementation of the QEMU emulator. This flaw occurs in the
icmp6_send_echoreply() routine while replying to an ICMP echo request,
also known as ping. This flaw allows a malicious guest to leak the
contents of the host memory, resulting in possible information disclosure.
This flaw affects versions of libslirp before 4.3.1.
References:
https://nvd.nist.gov/vuln/detail/CVE-2020-10756
https://bugzilla.redhat.com/show_bug.cgi?id=1835986
Upstream patches:
https://gitlab.freedesktop.org/slirp/libslirp/-/commit/c7ede54cbd2e2b25385325600958ba0124e31cc0
Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Diffstat (limited to 'contrib')
0 files changed, 0 insertions, 0 deletions