ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fuse-overlayfsUpgrade oci-umountUpgrade oci-systemd-hook | May 13, 2022 | Jul 29, 2019 |
| Amazon Linux Ami 2 | — | Upgrade qemu-kvm-coreUpgrade qemu-user-binfmtUpgrade qemu-block-dmgUpgrade qemu-block-sshUpgrade qemu-guest-agentUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-system-x86Upgrade qemu-ui-sdlUpgrade qemu-audio-ossUpgrade qemu-block-nfsUpgrade qemu-system-aarch64Upgrade qemu-audio-sdlUpgrade qemu-block-iscsiUpgrade qemu-imgUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-user-staticUpgrade qemu-ui-cursesUpgrade ivshmem-toolsUpgrade qemu-debuginfoUpgrade qemu-ui-gtkUpgrade qemu-audio-paUpgrade qemu-system-x86-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade qemu-commonUpgrade qemu-user | Apr 27, 2020 | Jul 29, 2019 |
| Amazon_linux | — | Upgrade qemu-kvm | Nov 18, 2020 | Jul 29, 2019 |
| Centos_linux | — | Upgrade qemu-kvm-commonUpgrade oci-systemd-hook-debuginfoUpgrade podman-remote-debuginfoUpgrade containers-commonUpgrade qemu-guest-agentUpgrade toolboxUpgrade oci-umountUpgrade qemu-kvm-ma-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade podman-testsUpgrade podmanUpgrade qemu-kvm-tools-maUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade skopeo-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade oci-umount-debuginfoUpgrade fuse-overlayfsUpgrade buildahUpgrade skopeoUpgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade cockpit-podmanUpgrade containernetworking-plugins-debuginfoUpgrade oci-systemd-hookUpgrade podman-remoteUpgrade runcUpgrade qemu-img-maUpgrade qemu-kvm-maUpgrade skopeo-testsUpgrade podman-dockerUpgrade qemu-imgUpgrade podman-manpagesUpgrade qemu-kvm-debuginfoUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade qemu-kvmUpgrade containernetworking-pluginsUpgrade oci-umount-debugsourceUpgrade container-selinuxUpgrade podman-debuginfoUpgrade runc-debugsourceUpgrade skopeo-debuginfoUpgrade qemu-kvm-common-maUpgrade podman-debugsourceUpgrade qemu-kvm-toolsUpgrade buildah-testsUpgrade python-podman-api | Nov 6, 2019 | Jul 29, 2019 |
| Debian | — | Upgrade qemuUpgrade slirp4netns | Aug 26, 2019 | Jul 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Jul 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Aug 31, 2020 | Jul 29, 2019 |
| Oracle_linux | — | Upgrade qemu-block-iscsiUpgrade qemu-guest-agentUpgrade podman-remoteUpgrade qemu-system-x86Upgrade skopeoUpgrade skopeo-testsUpgrade oci-umountUpgrade qemu-block-rbdUpgrade podmanUpgrade containernetworking-pluginsUpgrade runcUpgrade containers-commonUpgrade podman-manpagesUpgrade container-selinuxUpgrade qemuUpgrade slirp4netnsUpgrade qemu-kvmUpgrade qemu-imgUpgrade cockpit-podmanUpgrade buildah-testsUpgrade buildahUpgrade qemu-kvm-toolsUpgrade fuse-overlayfsUpgrade podman-testsUpgrade oci-systemd-hookUpgrade qemu-block-glusterUpgrade qemu-kvm-coreUpgrade podman-dockerUpgrade qemu-system-x86-coreUpgrade qemu-kvm-commonUpgrade qemu-commonUpgrade python-podman-api | Sep 5, 2019 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade qemu-kvm-common-maUpgrade oci-systemd-hook-debugsourceUpgrade oci-umount-debuginfoUpgrade podman-testsUpgrade oci-systemd-hookUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade oci-umount-debugsourceUpgrade podman-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade buildah-testsUpgrade qemu-imgUpgrade qemu-kvmUpgrade skopeo-testsUpgrade container-selinuxUpgrade containers-commonUpgrade fuse-overlayfs-debugsourceUpgrade qemu-kvm-ma-debuginfoUpgrade slirp4netnsUpgrade python-podman-apiUpgrade cockpit-podmanUpgrade qemu-kvm-tools-maUpgrade runc-debuginfoUpgrade buildahUpgrade qemu-img-maUpgrade fuse-overlayfsNo solution existsUpgrade podman-dockerUpgrade skopeo-debugsourceUpgrade qemu-kvm-commonUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade podman-remoteUpgrade oci-systemd-hook-debuginfoUpgrade podman-remote-debuginfoUpgrade toolboxUpgrade buildah-debugsourceUpgrade skopeoUpgrade buildah-tests-debuginfoUpgrade podman-debuginfoUpgrade podman-manpagesUpgrade oci-umountUpgrade runcUpgrade buildah-debuginfoUpgrade containernetworking-pluginsUpgrade containernetworking-plugins-debugsourceUpgrade qemu-kvm-ma | Nov 6, 2019 | Jul 29, 2019 |
| Rocky_linux | — | Upgrade fuse-overlayfsUpgrade oci-systemd-hook-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade oci-systemd-hookUpgrade oci-umount-debugsourceUpgrade oci-umount-debuginfoUpgrade oci-umountUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfs-debuginfo | Mar 12, 2024 | Jul 29, 2019 |
| Suse | — | Upgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-cursesUpgrade qemu-block-rbdUpgrade qemu-ui-sdlUpgrade qemu-toolsUpgrade xen-develUpgrade xen-doc-htmlUpgrade qemu-block-glusterUpgrade qemu-ipxeUpgrade qemu-block-nfsUpgrade qemu-audio-ossUpgrade qemu-audio-spiceUpgrade qemu-hw-display-qxlUpgrade qemu-ui-openglUpgrade qemuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-vgaUpgrade xen-libsUpgrade qemu-linux-userUpgrade qemu-hw-display-virtio-gpuUpgrade xen-libs-32bitUpgrade qemu-sgabiosUpgrade qemu-x86Upgrade xen-tools-domuUpgrade qemu-ppcUpgrade kvmUpgrade qemu-armUpgrade qemu-audio-sdlUpgrade qemu-audio-alsaUpgrade xen-kmp-paeUpgrade qemu-ksmUpgrade qemu-kvmUpgrade qemu-s390xUpgrade qemu-testsuiteUpgrade qemu-block-sshUpgrade qemu-ui-spice-coreUpgrade qemu-langUpgrade qemu-s390Upgrade qemu-block-iscsiUpgrade qemu-block-dmgUpgrade qemu-extraUpgrade qemu-ui-spice-appUpgrade xen-toolsUpgrade qemu-skibootUpgrade xen-kmp-defaultUpgrade qemu-vgabiosUpgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade qemu-audio-paUpgrade xenUpgrade qemu-hw-usb-redirectUpgrade qemu-block-curlUpgrade qemu-guest-agentUpgrade qemu-seabiosUpgrade qemu-microvm | Aug 22, 2019 | Jul 29, 2019 |
| Ubuntu | — | Upgrade qemu-system-commonUpgrade qemuUpgrade qemu-system-guiUpgrade qemu-commonUpgrade qemu-kvmUpgrade qemu-utilsUpgrade qemu-user-staticUpgrade qemu-system-x86 | Nov 14, 2019 | Jul 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub