vulnerability
Amazon Linux AMI 2: CVE-2019-14378: Security patch for qemu (ALAS-2020-1401)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:S/C:P/I:P/A:P) | Jul 29, 2019 | Apr 27, 2020 | Nov 27, 2024 |
Severity
7
CVSS
(AV:N/AC:L/Au:S/C:P/I:P/A:P)
Published
Jul 29, 2019
Added
Apr 27, 2020
Modified
Nov 27, 2024
Description
ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
Solutions
amazon-linux-ami-2-upgrade-ivshmem-toolsamazon-linux-ami-2-upgrade-qemuamazon-linux-ami-2-upgrade-qemu-audio-alsaamazon-linux-ami-2-upgrade-qemu-audio-ossamazon-linux-ami-2-upgrade-qemu-audio-paamazon-linux-ami-2-upgrade-qemu-audio-sdlamazon-linux-ami-2-upgrade-qemu-block-curlamazon-linux-ami-2-upgrade-qemu-block-dmgamazon-linux-ami-2-upgrade-qemu-block-iscsiamazon-linux-ami-2-upgrade-qemu-block-nfsamazon-linux-ami-2-upgrade-qemu-block-rbdamazon-linux-ami-2-upgrade-qemu-block-sshamazon-linux-ami-2-upgrade-qemu-commonamazon-linux-ami-2-upgrade-qemu-debuginfoamazon-linux-ami-2-upgrade-qemu-guest-agentamazon-linux-ami-2-upgrade-qemu-imgamazon-linux-ami-2-upgrade-qemu-kvmamazon-linux-ami-2-upgrade-qemu-kvm-coreamazon-linux-ami-2-upgrade-qemu-system-aarch64amazon-linux-ami-2-upgrade-qemu-system-aarch64-coreamazon-linux-ami-2-upgrade-qemu-system-x86amazon-linux-ami-2-upgrade-qemu-system-x86-coreamazon-linux-ami-2-upgrade-qemu-ui-cursesamazon-linux-ami-2-upgrade-qemu-ui-gtkamazon-linux-ami-2-upgrade-qemu-ui-sdlamazon-linux-ami-2-upgrade-qemu-useramazon-linux-ami-2-upgrade-qemu-user-binfmtamazon-linux-ami-2-upgrade-qemu-user-static
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.