Threats tagged 'ghsa-r5f9-pc8m-f599'

A vulnerability in libslirp's icmp_forward_error() function allows an out-of-bounds heap read when constructing ICMP error responses. The flaw arises because the length of the quoted original IPv4 packet is taken from the IP header without verifying it against the actual buffer length. This can lead to leakage of host memory into ICMP error packets sent to guests or containers.