Source: libslirp Version: 4.9.4-1 Severity: important Tags: security upstream X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Hi, The following vulnerability was published for libslirp. CVE-2026-95508[0]: | A heap-based buffer overflow was found in the DHCPv6 and TFTP | response builders of libslirp. When the host is configured with a | small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP | blksize option can overflow the reply buffer with attacker- | controlled content and length, resulting in denial of service and | potentially arbitrary code execution in the host process. The | default interface MTU is not affected. Note the security-tracker references alrady two related commits (I think we got them right), but is the TFTP part yet missing? If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-95508 https://www.cve.org/CVERecord?id=CVE-2026-95508 [1] https://bugzilla.redhat.com/show_bug.cgi?id=2537748 Please adjust the affected versions in the BTS as needed. Regards, Salvatore
