It was discovered that libslirp incorrectly handled TCP urgent data. A privileged attacker inside a guest VM could possibly use this issue to obtain sensitive information from the host process memory.

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

USN-8550-1: libslirp vulnerability

VERWANDTEARTIKEL

CVE-2026-62685 - File Browser: Colliding username normalization gives two users the same home directory

CVE-2026-61828 - nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server`

CVE-2026-60005 - NGINX ngx_http_slice_module vulnerability

CVE-2026-55242 - ERPNext: Server-Side Template Injection (SSTI) in Batch autonaming via Stock Settings.naming_series_prefix

CVE-2026-50148 - Metabase: Remote Code Execution via Snowflake JDBC Driver Arbitrary File Write

CVE-2026-47158 - Vaultwarden: CSRF in SSO Authorization Flow