https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:28:41 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-9539 <p><strong>Affected:</strong> Alpaquita:23: libslirp, Alpaquita:25: libslirp, Alpaquita:stream: libslirp</p> <p><strong>Affected:</strong> Alpaquita:23: libslirp, Alpaquita:25: libslirp, Alpaquita:stream: libslirp</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-9539 https://cve.radiocsirt.org/vuln/euvd-2026-329775 EUVD-2026-329775 https://cve.radiocsirt.org/vuln/euvd-2026-329775 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9539 <p>An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g., QEMU) allows a privileged guest VM attacker (root or CAP_NET_RAW) to leak gigabytes of sensitive host-process heap memory via sending crafted TCP segments with manipulated URG flags and urgent pointers (ti_urp).</p> <p>An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g., QEMU) allows a privileged guest VM attacker (root or CAP_NET_RAW) to leak gigabytes of sensitive host-process heap memory via sending crafted TCP segments with manipulated URG flags and urgent pointers (ti_urp).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-9539 https://cve.radiocsirt.org/vuln/ghsa-4243-hp56-4m7f <p>An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g., QEMU) allows a privileged guest VM attacker (root or CAP_NET_RAW) to leak gigabytes of sensitive host-process heap memory via sending crafted TCP segments with manipulated URG flags and urgent pointers (ti_urp).</p> <p>An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g., QEMU) allows a privileged guest VM attacker (root or CAP_NET_RAW) to leak gigabytes of sensitive host-process heap memory via sending crafted TCP segments with manipulated URG flags and urgent pointers (ti_urp).</p> https://cve.radiocsirt.org/vuln/ghsa-4243-hp56-4m7f https://cve.radiocsirt.org/vuln/msrc_cve-2026-9539 msrc_CVE-2026-9539 https://cve.radiocsirt.org/vuln/msrc_cve-2026-9539 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-9539 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libslirp, Ubuntu:22.04:LTS: libslirp, Ubuntu:24.04:LTS: libslirp, Ubuntu:25.10: libslirp, Ubuntu:26.04:LTS: libslirp</p> <p>An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g., QEMU) allows a privileged guest VM attacker (root or CAP_NET_RAW) to leak gigabytes of sensitive host-process heap memory via sending crafted TCP segments with manipulated URG flags and urgent pointers (ti_urp).</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libslirp, Ubuntu:22.04:LTS: libslirp, Ubuntu:24.04:LTS: libslirp, Ubuntu:25.10: libslirp, Ubuntu:26.04:LTS: libslirp</p> <p>An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g., QEMU) allows a privileged guest VM attacker (root or CAP_NET_RAW) to leak gigabytes of sensitive host-process heap memory via sending crafted TCP segments with manipulated URG flags and urgent pointers (ti_urp).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-9539