ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oci-umountUpgrade fuse-overlayfsUpgrade oci-systemd-hook | May 13, 2022 | Jul 29, 2019 |
| Amazon Linux Ami 2 | — | Upgrade qemu-system-x86-coreUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-audio-paUpgrade ivshmem-toolsUpgrade qemu-commonUpgrade qemu-system-aarch64-coreUpgrade qemu-block-curlUpgrade qemu-user-staticUpgrade qemu-kvmUpgrade qemu-userUpgrade qemu-ui-cursesUpgrade qemu-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-block-rbdUpgrade qemu-audio-sdlUpgrade qemu-block-iscsiUpgrade qemuUpgrade qemu-guest-agentUpgrade qemu-audio-ossUpgrade qemu-block-sshUpgrade qemu-system-aarch64Upgrade qemu-ui-sdlUpgrade qemu-system-x86Upgrade qemu-block-nfsUpgrade qemu-block-dmgUpgrade qemu-user-binfmt | Apr 27, 2020 | Jul 29, 2019 |
| Amazon_linux | — | Upgrade qemu-kvm | Nov 18, 2020 | Jul 29, 2019 |
| Centos_linux | — | Upgrade podman-manpagesUpgrade qemu-kvm-debuginfoUpgrade runc-debuginfoUpgrade qemu-kvmUpgrade podman-remoteUpgrade skopeo-testsUpgrade qemu-kvm-maUpgrade slirp4netns-debuginfoUpgrade qemu-kvm-common-maUpgrade cockpit-podmanUpgrade containernetworking-plugins-debuginfoUpgrade oci-systemd-hookUpgrade qemu-img-maUpgrade runcUpgrade skopeo-debuginfoUpgrade oci-umount-debugsourceUpgrade runc-debugsourceUpgrade qemu-imgUpgrade podman-debugsourceUpgrade podman-dockerUpgrade buildah-testsUpgrade podman-debuginfoUpgrade container-selinuxUpgrade slirp4netnsUpgrade containernetworking-pluginsUpgrade python-podman-apiUpgrade qemu-kvm-toolsUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade qemu-kvm-commonUpgrade skopeo-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade skopeoUpgrade oci-umount-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade oci-umountUpgrade fuse-overlayfs-debugsourceUpgrade toolboxUpgrade qemu-kvm-ma-debuginfoUpgrade qemu-guest-agentUpgrade podman-remote-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade buildah-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade containers-commonUpgrade fuse-overlayfs-debuginfoUpgrade podman-testsUpgrade qemu-kvm-tools-ma | Nov 6, 2019 | Jul 29, 2019 |
| Debian | — | Upgrade slirp4netnsUpgrade qemu | Aug 26, 2019 | Jul 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Jul 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Aug 31, 2020 | Jul 29, 2019 |
| Oracle_linux | — | Upgrade container-selinuxUpgrade podman-manpagesUpgrade qemu-imgUpgrade qemuUpgrade oci-systemd-hookUpgrade qemu-system-x86-coreUpgrade qemu-kvmUpgrade slirp4netnsUpgrade podman-testsUpgrade qemu-block-glusterUpgrade qemu-kvm-coreUpgrade qemu-commonUpgrade qemu-kvm-commonUpgrade fuse-overlayfsUpgrade qemu-kvm-toolsUpgrade cockpit-podmanUpgrade python-podman-apiUpgrade buildahUpgrade podman-dockerUpgrade buildah-testsUpgrade containers-commonUpgrade skopeo-testsUpgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade oci-umountUpgrade runcUpgrade podmanUpgrade podman-remoteUpgrade skopeoUpgrade qemu-guest-agentUpgrade qemu-system-x86Upgrade containernetworking-plugins | Sep 5, 2019 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade podman-manpagesUpgrade skopeo-debugsourceUpgrade podman-dockerUpgrade buildah-debuginfoUpgrade qemu-img-maUpgrade qemu-kvm-commonUpgrade buildah-debugsourceUpgrade podman-remote-debuginfoUpgrade containernetworking-pluginsUpgrade containernetworking-plugins-debugsourceUpgrade oci-umountUpgrade buildahUpgrade skopeoUpgrade podman-remoteUpgrade podmanUpgrade oci-systemd-hook-debuginfoUpgrade toolboxNo solution existsUpgrade podman-debuginfoUpgrade qemu-kvm-maUpgrade runcUpgrade buildah-tests-debuginfoUpgrade cockpit-podmanUpgrade runc-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade qemu-kvm-common-maUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-ma-debuginfoUpgrade oci-systemd-hookUpgrade oci-umount-debugsourceUpgrade podman-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade qemu-kvm-tools-maUpgrade slirp4netns-debugsourceUpgrade container-selinuxUpgrade runc-debuginfoUpgrade slirp4netnsUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade qemu-kvmUpgrade oci-umount-debuginfoUpgrade podman-testsUpgrade qemu-kvm-toolsUpgrade skopeo-debuginfoUpgrade qemu-imgUpgrade oci-systemd-hook-debugsourceUpgrade buildah-testsUpgrade python-podman-apiUpgrade containers-common | Nov 6, 2019 | Jul 29, 2019 |
| Rocky_linux | — | Upgrade oci-systemd-hook-debuginfoUpgrade oci-umount-debugsourceUpgrade fuse-overlayfsUpgrade oci-systemd-hook-debugsourceUpgrade oci-systemd-hookUpgrade oci-umount-debuginfoUpgrade oci-umountUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfs-debugsource | Mar 12, 2024 | Jul 29, 2019 |
| Suse | — | Upgrade xen-doc-htmlUpgrade qemu-linux-userUpgrade qemu-sgabiosUpgrade xen-develUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-sdlUpgrade qemu-ppcUpgrade qemu-x86Upgrade xen-libs-32bitUpgrade qemu-toolsUpgrade qemu-armUpgrade kvmUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-openglUpgrade qemu-audio-spiceUpgrade qemu-ui-cursesUpgrade qemu-block-nfsUpgrade xen-tools-domUUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade qemu-block-glusterUpgrade qemu-chardev-spiceUpgrade xen-libsUpgrade qemu-hw-display-qxlUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-rbdUpgrade xenUpgrade qemu-audio-sdlUpgrade qemu-microvmUpgrade qemu-hw-usb-redirectUpgrade qemu-block-curlUpgrade xen-kmp-paeUpgrade qemu-audio-paUpgrade qemu-block-dmgUpgrade xen-toolsUpgrade qemu-seabiosUpgrade qemu-extraUpgrade qemu-s390Upgrade qemu-ui-spice-appUpgrade qemu-testsuiteUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade qemu-ui-gtkUpgrade qemu-block-sshUpgrade qemu-guest-agentUpgrade qemu-s390xUpgrade qemu-ksmUpgrade qemu-kvmUpgrade qemu-ui-spice-coreUpgrade qemu-langUpgrade qemu-audio-alsaUpgrade qemu-vgabiosUpgrade xen-kmp-defaultUpgrade qemu-skiboot | Aug 22, 2019 | Jul 29, 2019 |
| Ubuntu | — | Upgrade qemu-system-commonUpgrade qemuUpgrade qemu-commonUpgrade qemu-system-guiUpgrade qemu-utilsUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-user-static | Nov 14, 2019 | Jul 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub