ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oci-umountUpgrade fuse-overlayfsUpgrade oci-systemd-hook | May 13, 2022 | Jul 29, 2019 |
| Amazon Linux Ami 2 | — | Upgrade qemu-block-curlUpgrade qemu-user-staticUpgrade qemu-ui-gtkUpgrade qemu-ui-cursesUpgrade qemu-userUpgrade qemu-audio-alsaUpgrade qemu-commonUpgrade ivshmem-toolsUpgrade qemu-audio-paUpgrade qemu-system-x86-coreUpgrade qemu-debuginfoUpgrade qemu-kvmUpgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade qemu-block-dmgUpgrade qemu-block-iscsiUpgrade qemu-audio-ossUpgrade qemu-ui-sdlUpgrade qemu-block-nfsUpgrade qemu-user-binfmtUpgrade qemu-audio-sdlUpgrade qemu-imgUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-block-sshUpgrade qemu-system-x86Upgrade qemu-guest-agentUpgrade qemu-system-aarch64 | Apr 27, 2020 | Jul 29, 2019 |
| Amazon_linux | — | Upgrade qemu-kvm | Nov 18, 2020 | Jul 29, 2019 |
| Centos_linux | — | Upgrade qemu-kvm-tools-maUpgrade oci-systemd-hook-debugsourceUpgrade qemu-kvm-commonUpgrade podman-testsUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade buildahUpgrade toolboxUpgrade buildah-debuginfoUpgrade oci-umountUpgrade qemu-guest-agentUpgrade buildah-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade skopeoUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade containers-commonUpgrade oci-umount-debuginfoUpgrade qemu-kvm-ma-debuginfoUpgrade podman-remote-debuginfoUpgrade buildah-tests-debuginfoUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade python-podman-apiUpgrade podman-manpagesUpgrade qemu-kvmUpgrade oci-systemd-hookUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade qemu-kvm-maUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade slirp4netnsUpgrade podman-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-img-maUpgrade podman-dockerUpgrade podman-debugsourceUpgrade cockpit-podmanUpgrade qemu-kvm-common-maUpgrade buildah-testsUpgrade runcUpgrade oci-umount-debugsourceUpgrade runc-debuginfoUpgrade skopeo-debuginfoUpgrade skopeo-testsUpgrade runc-debugsource | Nov 6, 2019 | Jul 29, 2019 |
| Debian | — | Upgrade slirp4netnsUpgrade qemu | Aug 26, 2019 | Jul 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | Jul 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Aug 31, 2020 | Jul 29, 2019 |
| Oracle_linux | — | Upgrade oci-umountUpgrade skopeoUpgrade podmanUpgrade qemu-system-x86Upgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade podman-remoteUpgrade qemu-guest-agentUpgrade runcUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade qemuUpgrade cockpit-podmanUpgrade qemu-kvmUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade python-podman-apiUpgrade podman-testsUpgrade qemu-kvm-coreUpgrade qemu-system-x86-coreUpgrade container-selinuxUpgrade buildah-testsUpgrade buildahUpgrade qemu-kvm-toolsUpgrade podman-manpagesUpgrade qemu-kvm-commonUpgrade qemu-commonUpgrade podman-dockerUpgrade oci-systemd-hookUpgrade qemu-block-glusterUpgrade qemu-img | Sep 5, 2019 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade qemu-kvm-toolsUpgrade oci-umount-debuginfoUpgrade slirp4netns-debugsourceUpgrade buildah-testsUpgrade oci-systemd-hookUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-common-maUpgrade podman-testsUpgrade runc-debuginfoUpgrade runc-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade slirp4netnsUpgrade qemu-kvm-tools-maUpgrade fuse-overlayfs-debugsourceUpgrade container-selinuxUpgrade oci-umount-debugsourceUpgrade podman-debugsourceUpgrade cockpit-podmanUpgrade qemu-kvmUpgrade slirp4netns-debuginfoUpgrade containers-commonUpgrade skopeo-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade python-podman-apiUpgrade qemu-imgUpgrade qemu-kvm-ma-debuginfoUpgrade skopeo-testsUpgrade podman-dockerUpgrade runcNo solution existsUpgrade podman-manpagesUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfsUpgrade podman-remote-debuginfoUpgrade qemu-kvm-commonUpgrade containernetworking-pluginsUpgrade buildahUpgrade oci-umountUpgrade qemu-kvm-maUpgrade podmanUpgrade skopeo-debugsourceUpgrade skopeoUpgrade podman-remoteUpgrade buildah-debugsourceUpgrade buildah-tests-debuginfoUpgrade oci-systemd-hook-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade buildah-debuginfoUpgrade qemu-img-maUpgrade podman-debuginfo | Nov 6, 2019 | Jul 29, 2019 |
| Rocky_linux | — | Upgrade oci-umountUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade oci-systemd-hook-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade oci-systemd-hookUpgrade oci-umount-debugsourceUpgrade oci-umount-debuginfo | Mar 12, 2024 | Jul 29, 2019 |
| Suse | — | Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-cursesUpgrade qemu-ui-sdlUpgrade xen-doc-htmlUpgrade qemu-ppcUpgrade qemu-toolsUpgrade xen-tools-domUUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-develUpgrade qemu-x86Upgrade qemu-audio-ossUpgrade qemu-hw-display-qxlUpgrade qemu-audio-spiceUpgrade qemu-block-nfsUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-openglUpgrade qemuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-sgabiosUpgrade qemu-armUpgrade qemu-chardev-spiceUpgrade qemu-block-glusterUpgrade qemu-linux-userUpgrade xen-libs-32bitUpgrade qemu-ipxeUpgrade xen-libsUpgrade qemu-block-rbdUpgrade kvmUpgrade qemu-audio-paUpgrade qemu-skibootUpgrade qemu-ui-spice-coreUpgrade qemu-block-sshUpgrade xenUpgrade qemu-block-iscsiUpgrade xen-kmp-paeUpgrade qemu-audio-sdlUpgrade qemu-audio-alsaUpgrade qemu-microvmUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-block-dmgUpgrade qemu-ui-gtkUpgrade qemu-s390Upgrade qemu-chardev-baumUpgrade qemu-s390xUpgrade qemu-testsuiteUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-appUpgrade xen-toolsUpgrade qemu-seabiosUpgrade qemu-extraUpgrade qemu-langUpgrade qemu-block-curlUpgrade qemu-ksmUpgrade xen-kmp-defaultUpgrade qemu-vgabios | Aug 22, 2019 | Jul 29, 2019 |
| Ubuntu | — | Upgrade qemu-utilsUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-user-staticUpgrade qemu-system-guiUpgrade qemu-commonUpgrade qemuUpgrade qemu-system-common | Nov 14, 2019 | Jul 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub