CVE-2020-1983: libslirp: use after free vulnerability cause a denial of service.
A use after free vulnerability in ipreass() in ipinput.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.
Other sources
A use-after-free flaw was found in the SLiRP networking implementation of the QEMU emulator. Specifically, this flaw occurs in the ipreass() routine while reassembling incoming IP fragments whose combined size is bigger than 65k. This flaw allows an attacker to crash the QEMU process on the host, resulting in a denial of service.
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2020-1983?
CVE-2020-1983 is a use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases.
What is the severity of CVE-2020-1983?
The severity of CVE-2020-1983 is high, with a CVSS score of 6.5.
How does CVE-2020-1983 affect the QEMU emulator?
CVE-2020-1983 can cause the QEMU process on the host to crash.
How can I fix CVE-2020-1983?
To fix CVE-2020-1983, update to libslirp version 4.3.0 or later.
Where can I find more information about CVE-2020-1983?
You can find more information about CVE-2020-1983 at the following references: [link1], [link2], [link3].