Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-115449 →
Non évaluée
A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under...
DEBIAN-CVE-2026-115449
Première détection SecPulse
Paquets affectés
| Écosystème | Paquet | Concernées | Corrigé |
|---|---|---|---|
| Debian:12 | libslirp |
Toutes les versions |
— |
| Debian:13 | libslirp |
Toutes les versions |
— |
| Debian:14 | libslirp |
Toutes les versions |
— |
Description d'origine La description telle que publiée par la source (souvent en anglais).
A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions where the normal ICMP socket is unavailable, this length mismatch causes the host's real IP address to be leaked to the guest in the echo reply, breaking the NAT isolation that user-mode networking is expected to provide.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Références
- advisory security-tracker.debian.org