Debian/libslirp: high 7.4
A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blk
Action: Upgrade libslirp to 4.9.5-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.9.5-1 | - |
Fixed versions
| 4.9.5-1 |
Sources
- osv: DEBIAN-CVE-2026-95508#Debian:14/libslirp
- https://security-tracker.debian.org/tracker/CVE-2026-95508
published · modified · JSON