CVE-2021-3594 · cross-distro fix matrix

CVE-2021-3594: An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure. This issue may lead to out-of-bounds read access or ind

Affects 8 Linux releases across 11 (distro × package) combinations.

Fix per ecosystem

Each block below is a distro release where CVE-2021-3594 has a known fix. Run the listed command on that distro to remediate.

Source: Debian Security Tracker

libslirp→ fixed in4.4.0-1+deb11u2urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libslirp
```
qemu→ fixed in1:4.1-2urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y qemu
```

Source: Debian Security Tracker

libslirp→ fixed in4.6.1-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libslirp
```
qemu→ fixed in1:4.1-2urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y qemu
```

Source: Debian Security Tracker

libslirp→ fixed in4.6.1-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libslirp
```
qemu→ fixed in1:4.1-2urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y qemu
```