Executive Summary

This vulnerability is an out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) component of freedesktop.org libslirp versions before v4.9.2. It occurs in hypervisor host environments such as QEMU. A privileged guest virtual machine attacker with root or CAP_NET_RAW privileges can exploit this by sending specially crafted TCP segments with manipulated URG flags and urgent pointers, which causes the host to leak gigabytes of sensitive heap memory from host processes.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability allows a privileged guest VM attacker to leak large amounts of sensitive memory from the host system. This memory leakage can expose confidential data processed by host applications, potentially leading to information disclosure and compromising the security of the host environment.

Useful 0 Not Useful 0