CVE-2021-3595: 
NixOS vulnerability analysis and mitigation

An invalid pointer initialization vulnerability (CVE-2021-3595) was discovered in the SLiRP networking implementation of QEMU. The vulnerability was disclosed on June 15, 2021, affecting the tftp_input() function when processing UDP packets smaller than the size of the 'tftp_t' structure (Red Hat CVE, GitHub Security Lab).

The vulnerability exists in the tftp_input() function of the SLiRP networking implementation. When processing a UDP packet that is smaller than the size of the tftp_t structure, the function uses memory from outside the working mbuf buffer. This occurs because the function attempts to access the packet data without properly validating the available bytes. The vulnerability has been assigned a CVSS score of 3.8 (LOW) with the vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N (NetApp Security).

The vulnerability could lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality, as it may allow attackers to access sensitive information from the host system (Debian LTS).

The vulnerability requires local access and can be exploited by a malicious guest to access information outside of its intended boundaries. An attacker inside a guest environment could potentially use this flaw to leak sensitive information from the host (Ubuntu Security).

The vulnerability was fixed in libslirp version 4.6.0. Users and administrators are advised to upgrade to this version or later. For systems that cannot be immediately upgraded, no alternative workarounds are available (Gentoo Security).