libslirp vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the libslirp package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Incorrect Resource Transfer Between Spheres	<0:4.4.0-2.module+el8.10.0+22202+761b9a65
H Directory Traversal	<0:4.4.0-2.module+el8.10.0+23498+f7d19d48
H Improper Certificate Validation	<0:4.4.0-2.module+el8.10.0+23320+f7205097
M HTTP Request Smuggling	<0:4.4.0-2.module+el8.10.0+23250+94af2c8e
H Improper Validation of Array Index	<0:4.4.0-1.module+el8.6.0+14673+621cb8be
H Allocation of Resources Without Limits or Throttling	<0:4.4.0-2.module+el8.10.0+22931+799fd806
H Improper Privilege Management	<0:4.4.0-2.module+el8.10.0+22417+2fb00970
H Directory Traversal	<0:4.4.0-2.module+el8.10.0+22397+e3c95ba6
H Improper Input Validation	<0:4.4.0-2.module+el8.10.0+22397+e3c95ba6
H Link Following	<0:4.4.0-2.module+el8.10.0+22397+e3c95ba6
H Improperly Controlled Sequential Memory Allocation	<0:4.4.0-2.module+el8.10.0+22346+28c02849
H Uncontrolled Recursion	<0:4.4.0-2.module+el8.10.0+22346+28c02849
H Uncontrolled Recursion	<0:4.4.0-2.module+el8.10.0+22346+28c02849
M Directory Traversal	<0:4.4.0-2.module+el8.10.0+22417+2fb00970
M Information Exposure	<0:4.4.0-2.module+el8.10.0+22417+2fb00970
M Improper Input Validation	<0:4.4.0-2.module+el8.10.0+22283+6d6d094a
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:4.4.0-2.module+el8.10.0+22283+6d6d094a
H Information Exposure Through Log Files	<0:4.4.0-2.module+el8.10.0+22202+761b9a65
H Allocation of Resources Without Limits or Throttling	<0:4.4.0-2.module+el8.10.0+22202+761b9a65
H Improper Validation of Integrity Check Value	<0:4.4.0-2.module+el8.10.0+22202+761b9a65
H Improper Input Validation	<0:4.4.0-2.module+el8.10.0+22202+761b9a65
H Misinterpretation of Input	<0:4.4.0-2.module+el8.10.0+22202+761b9a65
H Improper Input Validation	<0:4.4.0-2.module+el8.10.0+22202+761b9a65
H Memory Leak	<0:4.4.0-2.module+el8.10.0+22202+761b9a65
H Improper Input Validation	<0:4.4.0-2.module+el8.10.0+22202+761b9a65
M Resource Exhaustion	<0:4.4.0-2.module+el8.10.0+21962+8143777b
M Improper Check for Unusual or Exceptional Conditions	<0:4.4.0-1.module+el8.9.0+20326+387084d0
M Truncation of Security-relevant Information	<0:4.4.0-1.module+el8.9.0+20326+387084d0
M Information Exposure	<0:4.4.0-1.module+el8.9.0+20326+387084d0
M Improper Input Validation	<0:4.4.0-1.module+el8.9.0+20326+387084d0
M Resource Exhaustion	<0:4.4.0-1.module+el8.9.0+20326+387084d0
M Information Exposure	<0:4.4.0-1.module+el8.9.0+20326+387084d0
H Improper Handling of Highly Compressed Data (Data Amplification)	<0:4.4.0-2.module+el8.10.0+21672+01ba06ae
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:4.4.0-2.module+el8.10.0+21962+8143777b
H Link Following	<0:4.4.0-1.module+el8.9.0+21673+408ce8ab
M Information Exposure	<0:4.4.0-1.module+el8.9.0+20326+387084d0
M Resource Exhaustion	<0:4.4.0-1.module+el8.9.0+20326+387084d0
H Information Exposure	<0:4.4.0-1.module+el8.9.0+21242+944321bb
M Allocation of Resources Without Limits or Throttling	<0:4.4.0-1.module+el8.9.0+20656+56f336b9
M Buffer Access with Incorrect Length Value	<0:4.4.0-1.module+el8.9.0+20656+56f336b9
M Cross-site Scripting (XSS)	<0:4.4.0-1.module+el8.9.0+20656+56f336b9
M Cross-site Scripting (XSS)	<0:4.4.0-1.module+el8.9.0+20656+56f336b9
M Resource Exhaustion	<0:4.4.0-1.module+el8.9.0+20656+56f336b9
M CVE-2022-41715	<0:4.4.0-1.module+el8.9.0+20656+56f336b9
M HTTP Request Smuggling	<0:4.4.0-1.module+el8.9.0+20656+56f336b9
M Allocation of Resources Without Limits or Throttling	<0:4.4.0-1.module+el8.9.0+20656+56f336b9
M Cross-site Scripting (XSS)	<0:4.4.0-1.module+el8.9.0+19244+655f84ee
M HTTP Response Splitting	<0:4.4.0-1.module+el8.9.0+19244+655f84ee
M Improper Handling of Unicode Encoding	<0:4.4.0-1.module+el8.9.0+19244+655f84ee
M Authentication Bypass by Primary Weakness	<0:4.4.0-1.module+el8.9.0+19244+655f84ee
M Path Equivalence	<0:4.4.0-1.module+el8.9.0+19244+655f84ee
M Incorrect Default Permissions	<0:4.4.0-1.module+el8.9.0+19244+655f84ee
M Placement of User into Incorrect Group	<0:4.4.0-1.module+el8.9.0+19244+655f84ee
M Improper Handling of Unicode Encoding	<0:4.4.0-1.module+el8.9.0+19244+655f84ee
M Improper Handling of Unicode Encoding	<0:4.4.0-1.module+el8.9.0+19244+655f84ee
M Arbitrary Code Injection	<0:4.4.0-1.module+el8.9.0+19244+655f84ee
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:4.4.0-1.module+el8.9.0+19244+655f84ee
M Resource Exhaustion	<0:4.4.0-1.module+el8.9.0+19244+655f84ee
M Resource Exhaustion	<0:4.4.0-1.module+el8.9.0+19244+655f84ee
M Resource Exhaustion	<0:4.4.0-1.module+el8.9.0+19244+655f84ee
M Resource Exhaustion	<0:4.4.0-1.module+el8.9.0+19244+655f84ee
M Resource Exhaustion	<0:4.4.0-1.module+el8.9.0+19244+655f84ee
M Resource Exhaustion	<0:4.4.0-1.module+el8.9.0+19244+655f84ee
M Time-of-check Time-of-use (TOCTOU)	<0:4.4.0-1.module+el8.8.0+17821+de1b53f1
M Allocation of Resources Without Limits or Throttling	<0:4.4.0-1.module+el8.8.0+17821+de1b53f1
M Resource Exhaustion	<0:4.4.0-1.module+el8.9.0+20656+56f336b9
M Placement of User into Incorrect Group	<0:4.4.0-1.module+el8.7.0+16772+33343656
M Placement of User into Incorrect Group	<0:4.4.0-1.module+el8.8.0+17821+de1b53f1
M Resource Exhaustion	<0:4.4.0-1.module+el8.8.0+17821+de1b53f1
M Information Exposure	<0:4.4.0-1.module+el8.8.0+17821+de1b53f1
M Improperly Controlled Sequential Memory Allocation	<0:4.4.0-1.module+el8.8.0+17821+de1b53f1
M Improperly Controlled Sequential Memory Allocation	<0:4.4.0-1.module+el8.8.0+17821+de1b53f1
M Improperly Controlled Sequential Memory Allocation	<0:4.4.0-1.module+el8.8.0+17821+de1b53f1
M Improperly Controlled Sequential Memory Allocation	<0:4.4.0-1.module+el8.8.0+17821+de1b53f1
M Improperly Controlled Sequential Memory Allocation	<0:4.4.0-1.module+el8.8.0+17821+de1b53f1
M Improperly Controlled Sequential Memory Allocation	<0:4.4.0-1.module+el8.8.0+17821+de1b53f1
M Improperly Controlled Sequential Memory Allocation	<0:4.4.0-1.module+el8.8.0+17821+de1b53f1
M HTTP Request Smuggling	<0:4.4.0-1.module+el8.8.0+17821+de1b53f1
M Incorrect Default Permissions	<0:4.4.0-1.module+el8.7.0+16772+33343656
M Insufficient Entropy	<0:4.4.0-1.module+el8.8.0+18060+3f21f2cc
M Allocation of Resources Without Limits or Throttling	<0:4.4.0-1.module+el8.7.0+16772+33343656
H Improper Preservation of Permissions	<0:4.3.1-1.module+el8.6.0+14874+64436299
M Incorrect Default Permissions	<0:4.3.1-1.module+el8.6.0+14694+4f5132e0
H Incorrect Default Permissions	<0:4.4.0-1.module+el8.6.0+14673+621cb8be
H Incorrect Default Permissions	<0:4.4.0-1.module+el8.6.0+14673+621cb8be
M Missing Release of Resource after Effective Lifetime	<0:4.3.1-1.module+el8.7.0+16212+65e1b35f
M Use of a Broken or Risky Cryptographic Algorithm	<0:4.4.0-1.module+el8.7.0+16772+33343656
M Access of Resource Using Incompatible Type ('Type Confusion')	<0:4.4.0-1.module+el8.7.0+16772+33343656
M Race Condition	<0:4.4.0-1.module+el8.7.0+16772+33343656
H Time-of-check Time-of-use (TOCTOU)	<0:4.3.1-1.module+el8.4.0+11310+8c67a752
M Origin Validation Error	<0:4.3.1-1.module+el8.4.0+10607+f4da7515
M Improper Cross-boundary Removal of Sensitive Data	<0:4.3.1-1.module+el8.3.1+9803+64eb0fd6
M Man-in-the-Middle (MitM)	<0:4.3.1-1.module+el8.3.0+8221+97165c3f
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:4.3.1-1.module+el8.3.0+8221+97165c3f
M Incorrect Authorization	<0:4.3.0-3.module+el8.2.1+6816+bedf4f91
M Use After Free	<0:4.3.0-3.module+el8.2.1+6816+bedf4f91
M NULL Pointer Dereference	<0:4.3.1-1.module+el8.4.0+10607+f4da7515
M Out-of-bounds Read	<0:4.3.1-1.module+el8.3.0+8221+97165c3f
M Information Exposure	<0:4.3.1-1.module+el8.5.0+10306+3f72d66d
L Access of Uninitialized Pointer	*
L Access of Uninitialized Pointer	*
L Access of Uninitialized Pointer	*
L Access of Uninitialized Pointer	*
M Improper Locking	<0:4.4.0-1.module+el8.5.0+12582+56d94c81

Vulnerability

Vulnerable Version

Incorrect Resource Transfer Between Spheres

<0:4.4.0-2.module+el8.10.0+22202+761b9a65

Directory Traversal

<0:4.4.0-2.module+el8.10.0+23498+f7d19d48

Improper Certificate Validation

<0:4.4.0-2.module+el8.10.0+23320+f7205097

HTTP Request Smuggling

<0:4.4.0-2.module+el8.10.0+23250+94af2c8e

Improper Validation of Array Index

<0:4.4.0-1.module+el8.6.0+14673+621cb8be

Allocation of Resources Without Limits or Throttling

<0:4.4.0-2.module+el8.10.0+22931+799fd806

Improper Privilege Management

<0:4.4.0-2.module+el8.10.0+22417+2fb00970

Directory Traversal

<0:4.4.0-2.module+el8.10.0+22397+e3c95ba6

Improper Input Validation

<0:4.4.0-2.module+el8.10.0+22397+e3c95ba6

Link Following

<0:4.4.0-2.module+el8.10.0+22397+e3c95ba6

Improperly Controlled Sequential Memory Allocation

<0:4.4.0-2.module+el8.10.0+22346+28c02849

Uncontrolled Recursion

<0:4.4.0-2.module+el8.10.0+22346+28c02849

Uncontrolled Recursion

<0:4.4.0-2.module+el8.10.0+22346+28c02849

Directory Traversal

<0:4.4.0-2.module+el8.10.0+22417+2fb00970

Information Exposure

<0:4.4.0-2.module+el8.10.0+22417+2fb00970

Improper Input Validation

<0:4.4.0-2.module+el8.10.0+22283+6d6d094a

Loop with Unreachable Exit Condition ('Infinite Loop')

<0:4.4.0-2.module+el8.10.0+22283+6d6d094a

Information Exposure Through Log Files

<0:4.4.0-2.module+el8.10.0+22202+761b9a65

Allocation of Resources Without Limits or Throttling

<0:4.4.0-2.module+el8.10.0+22202+761b9a65

Improper Validation of Integrity Check Value

<0:4.4.0-2.module+el8.10.0+22202+761b9a65

Improper Input Validation

<0:4.4.0-2.module+el8.10.0+22202+761b9a65

Misinterpretation of Input

<0:4.4.0-2.module+el8.10.0+22202+761b9a65

Improper Input Validation

<0:4.4.0-2.module+el8.10.0+22202+761b9a65

Memory Leak

<0:4.4.0-2.module+el8.10.0+22202+761b9a65

Improper Input Validation

<0:4.4.0-2.module+el8.10.0+22202+761b9a65

Resource Exhaustion

<0:4.4.0-2.module+el8.10.0+21962+8143777b

Improper Check for Unusual or Exceptional Conditions

<0:4.4.0-1.module+el8.9.0+20326+387084d0

Truncation of Security-relevant Information

<0:4.4.0-1.module+el8.9.0+20326+387084d0

Information Exposure

<0:4.4.0-1.module+el8.9.0+20326+387084d0

Improper Input Validation

<0:4.4.0-1.module+el8.9.0+20326+387084d0

Resource Exhaustion

<0:4.4.0-1.module+el8.9.0+20326+387084d0

Information Exposure

<0:4.4.0-1.module+el8.9.0+20326+387084d0

Improper Handling of Highly Compressed Data (Data Amplification)

<0:4.4.0-2.module+el8.10.0+21672+01ba06ae

Loop with Unreachable Exit Condition ('Infinite Loop')

<0:4.4.0-2.module+el8.10.0+21962+8143777b

Link Following

<0:4.4.0-1.module+el8.9.0+21673+408ce8ab

Information Exposure

<0:4.4.0-1.module+el8.9.0+20326+387084d0

Resource Exhaustion

<0:4.4.0-1.module+el8.9.0+20326+387084d0

Information Exposure

<0:4.4.0-1.module+el8.9.0+21242+944321bb

Allocation of Resources Without Limits or Throttling

<0:4.4.0-1.module+el8.9.0+20656+56f336b9

Buffer Access with Incorrect Length Value

<0:4.4.0-1.module+el8.9.0+20656+56f336b9

Cross-site Scripting (XSS)

<0:4.4.0-1.module+el8.9.0+20656+56f336b9

Cross-site Scripting (XSS)

<0:4.4.0-1.module+el8.9.0+20656+56f336b9

Resource Exhaustion

<0:4.4.0-1.module+el8.9.0+20656+56f336b9

CVE-2022-41715

<0:4.4.0-1.module+el8.9.0+20656+56f336b9

HTTP Request Smuggling

<0:4.4.0-1.module+el8.9.0+20656+56f336b9

Allocation of Resources Without Limits or Throttling

<0:4.4.0-1.module+el8.9.0+20656+56f336b9

Cross-site Scripting (XSS)