ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oci-umountUpgrade fuse-overlayfsUpgrade oci-systemd-hook | May 13, 2022 | Jul 29, 2019 |
| Amazon Linux Ami 2 | — | Upgrade qemu-ui-cursesUpgrade qemu-kvmUpgrade qemu-system-aarch64-coreUpgrade ivshmem-toolsUpgrade qemu-commonUpgrade qemu-audio-paUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-user-staticUpgrade qemu-system-x86-coreUpgrade qemu-debuginfoUpgrade qemu-userUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemu-ui-sdlUpgrade qemu-block-sshUpgrade qemu-kvm-coreUpgrade qemu-audio-sdlUpgrade qemuUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-system-x86Upgrade qemu-user-binfmtUpgrade qemu-block-dmgUpgrade qemu-system-aarch64Upgrade qemu-block-nfs | Apr 27, 2020 | Jul 29, 2019 |
| Amazon_linux | — | Upgrade qemu-kvm | Nov 18, 2020 | Jul 29, 2019 |
| Centos_linux | — | Upgrade runc-debuginfoUpgrade oci-systemd-hookUpgrade podman-remoteUpgrade qemu-kvmUpgrade container-selinuxUpgrade slirp4netns-debugsourceUpgrade runcUpgrade containernetworking-pluginsUpgrade skopeo-testsUpgrade buildah-testsUpgrade qemu-kvm-toolsUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade qemu-kvm-common-maUpgrade runc-debugsourceUpgrade qemu-kvm-maUpgrade podman-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade cockpit-podmanUpgrade podman-dockerUpgrade oci-umount-debugsourceUpgrade qemu-imgUpgrade podman-manpagesUpgrade qemu-img-maUpgrade qemu-kvm-debuginfoUpgrade podman-debugsourceUpgrade python-podman-apiUpgrade skopeoUpgrade podman-testsUpgrade skopeo-debugsourceUpgrade qemu-kvm-commonUpgrade buildah-tests-debuginfoUpgrade qemu-guest-agentUpgrade podmanUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade buildahUpgrade oci-systemd-hook-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade oci-umountUpgrade containers-commonUpgrade toolboxUpgrade qemu-kvm-ma-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade oci-umount-debuginfoUpgrade qemu-kvm-tools-maUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsource | Nov 6, 2019 | Jul 29, 2019 |
| Debian | — | Upgrade slirp4netnsUpgrade qemu | Aug 26, 2019 | Jul 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Jul 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Aug 31, 2020 | Jul 29, 2019 |
| Oracle_linux | — | Upgrade podman-testsUpgrade cockpit-podmanUpgrade qemu-block-glusterUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-system-x86-coreUpgrade python-podman-apiUpgrade fuse-overlayfsUpgrade qemuUpgrade qemu-kvm-coreUpgrade container-selinuxUpgrade qemu-kvm-toolsUpgrade slirp4netnsUpgrade buildah-testsUpgrade podman-dockerUpgrade podman-manpagesUpgrade buildahUpgrade oci-systemd-hookUpgrade qemu-kvm-commonUpgrade qemu-commonUpgrade qemu-guest-agentUpgrade qemu-block-iscsiUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade qemu-block-rbdUpgrade skopeoUpgrade oci-umountUpgrade runcUpgrade skopeo-testsUpgrade podmanUpgrade qemu-system-x86 | Sep 5, 2019 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade qemu-kvm-ma-debuginfoUpgrade container-selinuxUpgrade slirp4netnsUpgrade python-podman-apiUpgrade qemu-imgUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-umount-debugsourceUpgrade oci-umount-debuginfoUpgrade podman-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade cockpit-podmanUpgrade containers-commonUpgrade oci-systemd-hook-debugsourceUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-common-maUpgrade runc-debuginfoUpgrade runc-debugsourceUpgrade skopeo-debuginfoUpgrade qemu-kvm-tools-maUpgrade qemu-kvm-debuginfoUpgrade skopeo-testsUpgrade buildah-testsUpgrade podman-testsUpgrade oci-systemd-hookUpgrade buildahUpgrade podman-manpagesUpgrade buildah-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade oci-umountUpgrade podman-remote-debuginfoUpgrade buildah-debuginfoUpgrade podman-dockerUpgrade podman-debuginfoUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debuginfoUpgrade runcUpgrade skopeo-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade qemu-kvm-maUpgrade containernetworking-pluginsUpgrade podmanUpgrade qemu-kvm-commonUpgrade skopeoUpgrade buildah-tests-debuginfoUpgrade toolboxUpgrade podman-remoteNo solution existsUpgrade qemu-img-ma | Nov 6, 2019 | Jul 29, 2019 |
| Rocky_linux | rocky-upgrade-fuse-overlayfsrocky-upgrade-fuse-overlayfs-debuginforocky-upgrade-fuse-overlayfs-debugsourcerocky-upgrade-oci-systemd-hookrocky-upgrade-oci-systemd-hook-debuginforocky-upgrade-oci-systemd-hook-debugsourcerocky-upgrade-oci-umountrocky-upgrade-oci-umount-debuginforocky-upgrade-oci-umount-debugsource | Mar 12, 2024 | Jul 29, 2019 | |
| Suse | — | suse-upgrade-kvmsuse-upgrade-qemususe-upgrade-qemu-armsuse-upgrade-qemu-audio-alsasuse-upgrade-qemu-audio-osssuse-upgrade-qemu-audio-pasuse-upgrade-qemu-audio-sdlsuse-upgrade-qemu-audio-spicesuse-upgrade-qemu-block-curlsuse-upgrade-qemu-block-dmgsuse-upgrade-qemu-block-glustersuse-upgrade-qemu-block-iscsisuse-upgrade-qemu-block-nfssuse-upgrade-qemu-block-rbdsuse-upgrade-qemu-block-sshsuse-upgrade-qemu-chardev-baumsuse-upgrade-qemu-chardev-spicesuse-upgrade-qemu-extrasuse-upgrade-qemu-guest-agentsuse-upgrade-qemu-hw-display-qxlsuse-upgrade-qemu-hw-display-virtio-gpususe-upgrade-qemu-hw-display-virtio-gpu-pcisuse-upgrade-qemu-hw-display-virtio-vgasuse-upgrade-qemu-hw-s390x-virtio-gpu-ccwsuse-upgrade-qemu-hw-usb-redirectsuse-upgrade-qemu-ipxesuse-upgrade-qemu-ksmsuse-upgrade-qemu-kvmsuse-upgrade-qemu-langsuse-upgrade-qemu-linux-usersuse-upgrade-qemu-microvmsuse-upgrade-qemu-ppcsuse-upgrade-qemu-s390suse-upgrade-qemu-s390xsuse-upgrade-qemu-seabiossuse-upgrade-qemu-sgabiossuse-upgrade-qemu-skibootsuse-upgrade-qemu-testsuitesuse-upgrade-qemu-toolssuse-upgrade-qemu-ui-cursessuse-upgrade-qemu-ui-gtksuse-upgrade-qemu-ui-openglsuse-upgrade-qemu-ui-sdlsuse-upgrade-qemu-ui-spice-appsuse-upgrade-qemu-ui-spice-coresuse-upgrade-qemu-vgabiossuse-upgrade-qemu-x86suse-upgrade-xensuse-upgrade-xen-develsuse-upgrade-xen-doc-htmlsuse-upgrade-xen-kmp-defaultsuse-upgrade-xen-kmp-paesuse-upgrade-xen-libssuse-upgrade-xen-libs-32bitsuse-upgrade-xen-toolssuse-upgrade-xen-tools-domu | Aug 22, 2019 | Jul 29, 2019 |
| Ubuntu | ubuntu-upgrade-qemuubuntu-upgrade-qemu-commonubuntu-upgrade-qemu-kvmubuntu-upgrade-qemu-system-commonubuntu-upgrade-qemu-system-guiubuntu-upgrade-qemu-system-x86ubuntu-upgrade-qemu-user-staticubuntu-upgrade-qemu-utils | Nov 14, 2019 | Jul 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub