ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oci-umountUpgrade fuse-overlayfsUpgrade oci-systemd-hook | May 13, 2022 | Jul 29, 2019 |
| Amazon Linux Ami 2 | — | Upgrade qemu-audio-sdlUpgrade qemu-system-x86Upgrade qemu-user-binfmtUpgrade qemu-block-iscsiUpgrade qemu-guest-agentUpgrade qemu-ui-sdlUpgrade qemu-audio-ossUpgrade qemu-block-sshUpgrade qemu-imgUpgrade qemu-block-dmgUpgrade qemu-block-rbdUpgrade qemu-block-nfsUpgrade qemu-kvm-coreUpgrade qemuUpgrade qemu-system-aarch64Upgrade qemu-system-aarch64-coreUpgrade qemu-userUpgrade qemu-system-x86-coreUpgrade qemu-user-staticUpgrade qemu-ui-cursesUpgrade qemu-ui-gtkUpgrade qemu-debuginfoUpgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade qemu-commonUpgrade ivshmem-toolsUpgrade qemu-audio-paUpgrade qemu-block-curl | Apr 27, 2020 | Jul 29, 2019 |
| Amazon_linux | — | Upgrade qemu-kvm | Nov 18, 2020 | Jul 29, 2019 |
| Centos_linux | — | Upgrade podman-remote-debuginfoUpgrade toolboxUpgrade qemu-kvm-ma-debuginfoUpgrade qemu-kvm-commonUpgrade oci-systemd-hook-debuginfoUpgrade podmanUpgrade buildahUpgrade qemu-guest-agentUpgrade containers-commonUpgrade skopeoUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade oci-umount-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-testsUpgrade qemu-kvm-tools-maUpgrade buildah-debugsourceUpgrade buildah-tests-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade fuse-overlayfsUpgrade oci-umountUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debuginfoUpgrade podman-manpagesUpgrade podman-dockerUpgrade cockpit-podmanUpgrade qemu-kvm-common-maUpgrade skopeo-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-debuginfoUpgrade qemu-img-maUpgrade python-podman-apiUpgrade slirp4netns-debugsourceUpgrade oci-umount-debugsourceUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade runcUpgrade buildah-testsUpgrade qemu-kvm-toolsUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade qemu-imgUpgrade qemu-kvm-maUpgrade skopeo-testsUpgrade runc-debugsourceUpgrade oci-systemd-hookUpgrade runc-debuginfoUpgrade container-selinux | Nov 6, 2019 | Jul 29, 2019 |
| Debian | — | Upgrade qemuUpgrade slirp4netns | Aug 26, 2019 | Jul 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Jul 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Aug 31, 2020 | Jul 29, 2019 |
| Oracle_linux | — | Upgrade fuse-overlayfsUpgrade qemu-kvm-coreUpgrade qemu-kvm-toolsUpgrade container-selinuxUpgrade buildahUpgrade podman-manpagesUpgrade slirp4netnsUpgrade buildah-testsUpgrade qemuUpgrade python-podman-apiUpgrade podman-testsUpgrade qemu-system-x86-coreUpgrade qemu-block-glusterUpgrade oci-systemd-hookUpgrade qemu-kvmUpgrade qemu-imgUpgrade cockpit-podmanUpgrade podman-dockerUpgrade qemu-commonUpgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade podmanUpgrade skopeo-testsUpgrade runcUpgrade skopeoUpgrade containers-commonUpgrade qemu-system-x86Upgrade containernetworking-pluginsUpgrade oci-umountUpgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade podman-remote | Sep 5, 2019 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade qemu-kvm-toolsUpgrade podman-testsUpgrade buildah-testsUpgrade qemu-kvm-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade oci-systemd-hookUpgrade qemu-imgUpgrade qemu-kvmUpgrade skopeo-testsUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade container-selinuxUpgrade oci-umount-debuginfoUpgrade qemu-kvm-tools-maUpgrade python-podman-apiUpgrade fuse-overlayfs-debugsourceUpgrade qemu-kvm-ma-debuginfoUpgrade podman-debugsourceUpgrade oci-umount-debugsourceUpgrade runc-debugsourceUpgrade runc-debuginfoUpgrade containers-commonUpgrade cockpit-podmanUpgrade qemu-kvm-common-maUpgrade slirp4netns-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade podman-debuginfoUpgrade buildah-debugsourceUpgrade qemu-kvm-maUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade podmanUpgrade oci-umountUpgrade fuse-overlayfs-debuginfoUpgrade podman-manpagesUpgrade runcUpgrade qemu-kvm-commonUpgrade podman-dockerUpgrade toolboxUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade skopeo-debugsourceUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade qemu-img-maUpgrade skopeoUpgrade oci-systemd-hook-debuginfoUpgrade buildahNo solution exists | Nov 6, 2019 | Jul 29, 2019 |
| Rocky_linux | — | Upgrade fuse-overlayfsUpgrade oci-umount-debugsourceUpgrade oci-systemd-hookUpgrade oci-umount-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade oci-umount | Mar 12, 2024 | Jul 29, 2019 |
| Suse | — | Upgrade qemu-hw-display-virtio-vgaUpgrade qemu-ipxeUpgrade qemu-armUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-chardev-spiceUpgrade xen-libs-32bitUpgrade qemu-linux-userUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpuUpgrade xen-develUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-block-glusterUpgrade xen-doc-htmlUpgrade qemu-sgabiosUpgrade qemu-block-nfsUpgrade qemu-ppcUpgrade qemu-audio-spiceUpgrade qemu-hw-display-qxlUpgrade xen-libsUpgrade qemu-toolsUpgrade xen-tools-domuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade kvmUpgrade qemu-audio-ossUpgrade qemu-ui-sdlUpgrade qemu-ui-openglUpgrade qemu-x86Upgrade xen-kmp-defaultUpgrade qemu-seabiosUpgrade qemu-skibootUpgrade qemu-ui-gtkUpgrade qemu-audio-sdlUpgrade qemu-audio-paUpgrade qemu-extraUpgrade qemu-s390xUpgrade xen-toolsUpgrade qemu-langUpgrade qemu-ui-spice-appUpgrade qemu-block-iscsiUpgrade qemu-microvmUpgrade qemu-guest-agentUpgrade qemu-ksmUpgrade qemu-kvmUpgrade qemu-block-curlUpgrade qemu-block-sshUpgrade xenUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-coreUpgrade qemu-audio-alsaUpgrade qemu-s390Upgrade qemu-vgabiosUpgrade qemu-chardev-baumUpgrade qemu-testsuiteUpgrade xen-kmp-paeUpgrade qemu-block-dmg | Aug 22, 2019 | Jul 29, 2019 |
| Ubuntu | — | Upgrade qemu-system-guiUpgrade qemuUpgrade qemu-commonUpgrade qemu-system-commonUpgrade qemu-system-x86Upgrade qemu-user-staticUpgrade qemu-kvmUpgrade qemu-utils | Nov 14, 2019 | Jul 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub