ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fuse-overlayfsUpgrade oci-umountUpgrade oci-systemd-hook | May 13, 2022 | Jul 29, 2019 |
| Amazon Linux Ami 2 | — | Upgrade qemu-system-aarch64-coreUpgrade qemu-commonUpgrade qemu-system-x86-coreUpgrade qemu-ui-cursesUpgrade qemu-debuginfoUpgrade qemu-kvmUpgrade qemu-audio-paUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-user-staticUpgrade qemu-userUpgrade qemu-audio-alsaUpgrade ivshmem-toolsUpgrade qemu-ui-sdlUpgrade qemu-system-aarch64Upgrade qemu-block-rbdUpgrade qemu-imgUpgrade qemu-block-nfsUpgrade qemu-audio-ossUpgrade qemu-block-dmgUpgrade qemu-kvm-coreUpgrade qemu-user-binfmtUpgrade qemu-audio-sdlUpgrade qemu-system-x86Upgrade qemu-block-iscsiUpgrade qemu-block-sshUpgrade qemu-guest-agentUpgrade qemu | Apr 27, 2020 | Jul 29, 2019 |
| Amazon_linux | — | Upgrade qemu-kvm | Nov 18, 2020 | Jul 29, 2019 |
| Centos_linux | — | Upgrade slirp4netns-debuginfoUpgrade cockpit-podmanUpgrade containernetworking-plugins-debuginfoUpgrade qemu-kvm-common-maUpgrade runcUpgrade podman-manpagesUpgrade qemu-kvm-debuginfoUpgrade podman-debuginfoUpgrade qemu-kvm-maUpgrade qemu-kvm-toolsUpgrade podman-dockerUpgrade buildah-testsUpgrade podman-remoteUpgrade slirp4netnsUpgrade oci-systemd-hookUpgrade qemu-imgUpgrade python-podman-apiUpgrade qemu-img-maUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade container-selinuxUpgrade oci-umount-debugsourceUpgrade podman-debugsourceUpgrade containernetworking-pluginsUpgrade skopeo-debuginfoUpgrade skopeo-testsUpgrade qemu-kvmUpgrade runc-debugsourceUpgrade qemu-kvm-tools-maUpgrade oci-systemd-hook-debugsourceUpgrade buildah-debugsourceUpgrade podman-testsUpgrade podman-remote-debuginfoUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade podmanUpgrade containernetworking-plugins-debugsourceUpgrade oci-umountUpgrade fuse-overlayfs-debugsourceUpgrade toolboxUpgrade qemu-kvm-ma-debuginfoUpgrade buildah-tests-debuginfoUpgrade containers-commonUpgrade skopeo-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade qemu-kvm-commonUpgrade buildahUpgrade oci-umount-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade qemu-guest-agent | Nov 6, 2019 | Jul 29, 2019 |
| Debian | — | Upgrade slirp4netnsUpgrade qemu | Aug 26, 2019 | Jul 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Jul 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Aug 31, 2020 | Jul 29, 2019 |
| Oracle_linux | — | Upgrade qemu-system-x86-coreUpgrade qemu-commonUpgrade podman-dockerUpgrade qemu-kvmUpgrade cockpit-podmanUpgrade qemu-kvm-commonUpgrade python-podman-apiUpgrade qemu-imgUpgrade slirp4netnsUpgrade qemuUpgrade fuse-overlayfsUpgrade oci-systemd-hookUpgrade qemu-kvm-coreUpgrade podman-testsUpgrade buildah-testsUpgrade podman-manpagesUpgrade buildahUpgrade qemu-kvm-toolsUpgrade container-selinuxUpgrade qemu-block-glusterUpgrade podman-remoteUpgrade skopeoUpgrade qemu-guest-agentUpgrade qemu-system-x86Upgrade containers-commonUpgrade containernetworking-pluginsUpgrade oci-umountUpgrade runcUpgrade podmanUpgrade skopeo-testsUpgrade qemu-block-iscsiUpgrade qemu-block-rbd | Sep 5, 2019 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade skopeo-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade fuse-overlayfsUpgrade qemu-img-maUpgrade fuse-overlayfs-debuginfoUpgrade podman-manpagesUpgrade buildah-debuginfoUpgrade podmanUpgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade oci-umountUpgrade buildah-tests-debuginfoUpgrade containernetworking-pluginsUpgrade oci-systemd-hook-debuginfoUpgrade qemu-kvm-maUpgrade podman-dockerUpgrade runcUpgrade buildah-debugsourceNo solution existsUpgrade podman-remoteUpgrade skopeoUpgrade buildahUpgrade qemu-kvm-commonUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade qemu-kvm-ma-debuginfoUpgrade runc-debuginfoUpgrade containers-commonUpgrade oci-umount-debugsourceUpgrade container-selinuxUpgrade oci-systemd-hook-debugsourceUpgrade qemu-imgUpgrade buildah-testsUpgrade qemu-kvm-toolsUpgrade oci-umount-debuginfoUpgrade podman-testsUpgrade qemu-kvmUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade runc-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade qemu-kvm-common-maUpgrade podman-debugsourceUpgrade oci-systemd-hookUpgrade fuse-overlayfs-debugsourceUpgrade qemu-kvm-tools-maUpgrade cockpit-podmanUpgrade qemu-kvm-debuginfoUpgrade python-podman-api | Nov 6, 2019 | Jul 29, 2019 |
| Rocky_linux | — | Upgrade oci-systemd-hook-debugsourceUpgrade oci-umount-debuginfoUpgrade oci-systemd-hook-debuginfoUpgrade oci-umount-debugsourceUpgrade oci-systemd-hookUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debuginfoUpgrade oci-umountUpgrade fuse-overlayfs-debugsource | Mar 12, 2024 | Jul 29, 2019 |
| Suse | — | Upgrade qemu-seabiosUpgrade qemu-langUpgrade xen-toolsUpgrade qemu-ui-spice-appUpgrade qemu-extraUpgrade qemu-audio-paUpgrade qemu-ui-gtkUpgrade qemu-testsuiteUpgrade qemu-chardev-baumUpgrade qemu-block-dmgUpgrade qemu-block-iscsiUpgrade qemu-s390Upgrade qemu-kvmUpgrade qemu-block-curlUpgrade xen-kmp-paeUpgrade xenUpgrade qemu-vgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-guest-agentUpgrade qemu-s390xUpgrade qemu-audio-alsaUpgrade qemu-audio-sdlUpgrade qemu-block-sshUpgrade qemu-microvmUpgrade xen-kmp-defaultUpgrade qemu-ksmUpgrade qemu-ui-spice-coreUpgrade qemu-skibootUpgrade qemu-sgabiosUpgrade qemu-x86Upgrade xen-libsUpgrade qemu-block-nfsUpgrade qemu-audio-spiceUpgrade qemu-linux-userUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-armUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-sdlUpgrade qemu-block-rbdUpgrade qemu-ipxeUpgrade xen-doc-htmlUpgrade kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-libs-32bitUpgrade qemu-ui-cursesUpgrade qemu-chardev-spiceUpgrade xen-develUpgrade qemu-block-glusterUpgrade xen-tools-domUUpgrade qemu-ppcUpgrade qemu-toolsUpgrade qemu-hw-display-qxlUpgrade qemu-audio-ossUpgrade qemu | Aug 22, 2019 | Jul 29, 2019 |
| Ubuntu | — | Upgrade qemu-user-staticUpgrade qemu-utilsUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-commonUpgrade qemuUpgrade qemu-system-guiUpgrade qemu-common | Nov 14, 2019 | Jul 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub