ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-fuse-overlayfsalma-upgrade-oci-systemd-hookalma-upgrade-oci-umount | May 13, 2022 | Jul 29, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-ivshmem-toolsamazon-linux-ami-2-upgrade-qemuamazon-linux-ami-2-upgrade-qemu-audio-alsaamazon-linux-ami-2-upgrade-qemu-audio-ossamazon-linux-ami-2-upgrade-qemu-audio-paamazon-linux-ami-2-upgrade-qemu-audio-sdlamazon-linux-ami-2-upgrade-qemu-block-curlamazon-linux-ami-2-upgrade-qemu-block-dmgamazon-linux-ami-2-upgrade-qemu-block-iscsiamazon-linux-ami-2-upgrade-qemu-block-nfsamazon-linux-ami-2-upgrade-qemu-block-rbdamazon-linux-ami-2-upgrade-qemu-block-sshamazon-linux-ami-2-upgrade-qemu-commonamazon-linux-ami-2-upgrade-qemu-debuginfoamazon-linux-ami-2-upgrade-qemu-guest-agentamazon-linux-ami-2-upgrade-qemu-imgamazon-linux-ami-2-upgrade-qemu-kvmamazon-linux-ami-2-upgrade-qemu-kvm-coreamazon-linux-ami-2-upgrade-qemu-system-aarch64amazon-linux-ami-2-upgrade-qemu-system-aarch64-coreamazon-linux-ami-2-upgrade-qemu-system-x86amazon-linux-ami-2-upgrade-qemu-system-x86-coreamazon-linux-ami-2-upgrade-qemu-ui-cursesamazon-linux-ami-2-upgrade-qemu-ui-gtkamazon-linux-ami-2-upgrade-qemu-ui-sdlamazon-linux-ami-2-upgrade-qemu-useramazon-linux-ami-2-upgrade-qemu-user-binfmtamazon-linux-ami-2-upgrade-qemu-user-static | Apr 27, 2020 | Jul 29, 2019 | |
| Amazon_linux | — | amazon-linux-upgrade-qemu-kvm | Nov 18, 2020 | Jul 29, 2019 |
| Centos_linux | — | centos-upgrade-buildahcentos-upgrade-buildah-debuginfocentos-upgrade-buildah-debugsourcecentos-upgrade-buildah-testscentos-upgrade-buildah-tests-debuginfocentos-upgrade-cockpit-podmancentos-upgrade-container-selinuxcentos-upgrade-containernetworking-pluginscentos-upgrade-containernetworking-plugins-debuginfocentos-upgrade-containernetworking-plugins-debugsourcecentos-upgrade-containers-commoncentos-upgrade-fuse-overlayfscentos-upgrade-fuse-overlayfs-debuginfocentos-upgrade-fuse-overlayfs-debugsourcecentos-upgrade-oci-systemd-hookcentos-upgrade-oci-systemd-hook-debuginfocentos-upgrade-oci-systemd-hook-debugsourcecentos-upgrade-oci-umountcentos-upgrade-oci-umount-debuginfocentos-upgrade-oci-umount-debugsourcecentos-upgrade-podmancentos-upgrade-podman-debuginfocentos-upgrade-podman-debugsourcecentos-upgrade-podman-dockercentos-upgrade-podman-manpagescentos-upgrade-podman-remotecentos-upgrade-podman-remote-debuginfocentos-upgrade-podman-testscentos-upgrade-python-podman-apicentos-upgrade-qemu-guest-agentcentos-upgrade-qemu-imgcentos-upgrade-qemu-img-macentos-upgrade-qemu-kvmcentos-upgrade-qemu-kvm-commoncentos-upgrade-qemu-kvm-common-macentos-upgrade-qemu-kvm-debuginfocentos-upgrade-qemu-kvm-macentos-upgrade-qemu-kvm-ma-debuginfocentos-upgrade-qemu-kvm-toolscentos-upgrade-qemu-kvm-tools-macentos-upgrade-runccentos-upgrade-runc-debuginfocentos-upgrade-runc-debugsourcecentos-upgrade-skopeocentos-upgrade-skopeo-debuginfocentos-upgrade-skopeo-debugsourcecentos-upgrade-skopeo-testscentos-upgrade-slirp4netnscentos-upgrade-slirp4netns-debuginfocentos-upgrade-slirp4netns-debugsourcecentos-upgrade-toolbox | Nov 6, 2019 | Jul 29, 2019 |
| Debian | debian-upgrade-qemudebian-upgrade-slirp4netns | Aug 26, 2019 | Jul 29, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-qemu-imghuawei-euleros-2_0_sp3-upgrade-qemu-kvmhuawei-euleros-2_0_sp3-upgrade-qemu-kvm-common | Apr 16, 2020 | Jul 29, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-qemu-img | Aug 31, 2020 | Jul 29, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-buildahoracle-linux-upgrade-buildah-testsoracle-linux-upgrade-cockpit-podmanoracle-linux-upgrade-containernetworking-pluginsoracle-linux-upgrade-containers-commonoracle-linux-upgrade-container-selinuxoracle-linux-upgrade-fuse-overlayfsoracle-linux-upgrade-oci-systemd-hookoracle-linux-upgrade-oci-umountoracle-linux-upgrade-podmanoracle-linux-upgrade-podman-dockeroracle-linux-upgrade-podman-manpagesoracle-linux-upgrade-podman-remoteoracle-linux-upgrade-podman-testsoracle-linux-upgrade-python-podman-apioracle-linux-upgrade-qemuoracle-linux-upgrade-qemu-block-glusteroracle-linux-upgrade-qemu-block-iscsioracle-linux-upgrade-qemu-block-rbdoracle-linux-upgrade-qemu-commonoracle-linux-upgrade-qemu-guest-agentoracle-linux-upgrade-qemu-imgoracle-linux-upgrade-qemu-kvmoracle-linux-upgrade-qemu-kvm-commonoracle-linux-upgrade-qemu-kvm-coreoracle-linux-upgrade-qemu-kvm-toolsoracle-linux-upgrade-qemu-system-x86oracle-linux-upgrade-qemu-system-x86-coreoracle-linux-upgrade-runcoracle-linux-upgrade-skopeooracle-linux-upgrade-skopeo-testsoracle-linux-upgrade-slirp4netns | Sep 5, 2019 | Jul 28, 2019 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-buildahredhat-upgrade-buildah-debuginforedhat-upgrade-buildah-debugsourceredhat-upgrade-buildah-testsredhat-upgrade-buildah-tests-debuginforedhat-upgrade-cockpit-podmanredhat-upgrade-container-selinuxredhat-upgrade-containernetworking-pluginsredhat-upgrade-containernetworking-plugins-debuginforedhat-upgrade-containernetworking-plugins-debugsourceredhat-upgrade-containers-commonredhat-upgrade-fuse-overlayfsredhat-upgrade-fuse-overlayfs-debuginforedhat-upgrade-fuse-overlayfs-debugsourceredhat-upgrade-oci-systemd-hookredhat-upgrade-oci-systemd-hook-debuginforedhat-upgrade-oci-systemd-hook-debugsourceredhat-upgrade-oci-umountredhat-upgrade-oci-umount-debuginforedhat-upgrade-oci-umount-debugsourceredhat-upgrade-podmanredhat-upgrade-podman-debuginforedhat-upgrade-podman-debugsourceredhat-upgrade-podman-dockerredhat-upgrade-podman-manpagesredhat-upgrade-podman-remoteredhat-upgrade-podman-remote-debuginforedhat-upgrade-podman-testsredhat-upgrade-python-podman-apiredhat-upgrade-qemu-imgredhat-upgrade-qemu-img-maredhat-upgrade-qemu-kvmredhat-upgrade-qemu-kvm-commonredhat-upgrade-qemu-kvm-common-maredhat-upgrade-qemu-kvm-debuginforedhat-upgrade-qemu-kvm-maredhat-upgrade-qemu-kvm-ma-debuginforedhat-upgrade-qemu-kvm-toolsredhat-upgrade-qemu-kvm-tools-maredhat-upgrade-runcredhat-upgrade-runc-debuginforedhat-upgrade-runc-debugsourceredhat-upgrade-skopeoredhat-upgrade-skopeo-debuginforedhat-upgrade-skopeo-debugsourceredhat-upgrade-skopeo-testsredhat-upgrade-slirp4netnsredhat-upgrade-slirp4netns-debuginforedhat-upgrade-slirp4netns-debugsourceredhat-upgrade-toolbox | Nov 6, 2019 | Jul 29, 2019 | |
| Rocky_linux | rocky-upgrade-fuse-overlayfsrocky-upgrade-fuse-overlayfs-debuginforocky-upgrade-fuse-overlayfs-debugsourcerocky-upgrade-oci-systemd-hookrocky-upgrade-oci-systemd-hook-debuginforocky-upgrade-oci-systemd-hook-debugsourcerocky-upgrade-oci-umountrocky-upgrade-oci-umount-debuginforocky-upgrade-oci-umount-debugsource | Mar 12, 2024 | Jul 29, 2019 | |
| Suse | — | suse-upgrade-kvmsuse-upgrade-qemususe-upgrade-qemu-armsuse-upgrade-qemu-audio-alsasuse-upgrade-qemu-audio-osssuse-upgrade-qemu-audio-pasuse-upgrade-qemu-audio-sdlsuse-upgrade-qemu-audio-spicesuse-upgrade-qemu-block-curlsuse-upgrade-qemu-block-dmgsuse-upgrade-qemu-block-glustersuse-upgrade-qemu-block-iscsisuse-upgrade-qemu-block-nfssuse-upgrade-qemu-block-rbdsuse-upgrade-qemu-block-sshsuse-upgrade-qemu-chardev-baumsuse-upgrade-qemu-chardev-spicesuse-upgrade-qemu-extrasuse-upgrade-qemu-guest-agentsuse-upgrade-qemu-hw-display-qxlsuse-upgrade-qemu-hw-display-virtio-gpususe-upgrade-qemu-hw-display-virtio-gpu-pcisuse-upgrade-qemu-hw-display-virtio-vgasuse-upgrade-qemu-hw-s390x-virtio-gpu-ccwsuse-upgrade-qemu-hw-usb-redirectsuse-upgrade-qemu-ipxesuse-upgrade-qemu-ksmsuse-upgrade-qemu-kvmsuse-upgrade-qemu-langsuse-upgrade-qemu-linux-usersuse-upgrade-qemu-microvmsuse-upgrade-qemu-ppcsuse-upgrade-qemu-s390suse-upgrade-qemu-s390xsuse-upgrade-qemu-seabiossuse-upgrade-qemu-sgabiossuse-upgrade-qemu-skibootsuse-upgrade-qemu-testsuitesuse-upgrade-qemu-toolssuse-upgrade-qemu-ui-cursessuse-upgrade-qemu-ui-gtksuse-upgrade-qemu-ui-openglsuse-upgrade-qemu-ui-sdlsuse-upgrade-qemu-ui-spice-appsuse-upgrade-qemu-ui-spice-coresuse-upgrade-qemu-vgabiossuse-upgrade-qemu-x86suse-upgrade-xensuse-upgrade-xen-develsuse-upgrade-xen-doc-htmlsuse-upgrade-xen-kmp-defaultsuse-upgrade-xen-kmp-paesuse-upgrade-xen-libssuse-upgrade-xen-libs-32bitsuse-upgrade-xen-toolssuse-upgrade-xen-tools-domu | Aug 22, 2019 | Jul 29, 2019 |
| Ubuntu | ubuntu-upgrade-qemuubuntu-upgrade-qemu-commonubuntu-upgrade-qemu-kvmubuntu-upgrade-qemu-system-commonubuntu-upgrade-qemu-system-guiubuntu-upgrade-qemu-system-x86ubuntu-upgrade-qemu-user-staticubuntu-upgrade-qemu-utils | Nov 14, 2019 | Jul 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub