Latest Libslirp project Vulnerabilities

● CVE-2021-3594

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smal...

Libslirp Project Libslirp<4.6.0

Redhat Enterprise Linux=8.0

Debian Debian Linux=9.0

Fedoraproject Fedora=33

Fedoraproject Fedora=34

and 12 more

● CVE-2021-3595

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could occur while processing a udp packet that is sma...

Libslirp Project Libslirp<4.6.0

Redhat Enterprise Linux=8.0

Debian Debian Linux=9.0

Fedoraproject Fedora=33

Fedoraproject Fedora=34

and 12 more

● CVE-2021-3593

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is sma...

Libslirp Project Libslirp<4.6.0

Redhat Enterprise Linux=8.0

Fedoraproject Fedora=33

Fedoraproject Fedora=34

Debian Debian Linux=9.0

and 12 more

● CVE-2021-3592

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() function and could occur while processing a udp packet that is sm...

Libslirp Project Libslirp<4.6.0

Redhat Enterprise Linux=8.0

Debian Debian Linux=9.0

Fedoraproject Fedora=33

Fedoraproject Fedora=34

and 12 more

● CVE-2020-29130

An out-of-bounds access issue was found in the SLiRP user networking implementation of QEMU. It could occur while processing ARP/NCSI packets, if the packet length was shorter than required to accommo...

Libslirp Project Libslirp<=4.3.1

Debian Debian Linux=9.0

Fedoraproject Fedora=32

Fedoraproject Fedora=33

ubuntu/libslirp<4.1.0-2ubuntu2.2

ubuntu/libslirp<4.3.1-1ubuntu0.1

and 3 more

● CVE-2020-29129

ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.

Libslirp Project Libslirp<=4.3.1

Fedoraproject Fedora=32

Fedoraproject Fedora=33

Debian Debian Linux=10.0

ubuntu/libslirp<4.1.0-2ubuntu2.2

ubuntu/libslirp<4.3.1-1ubuntu0.1

and 3 more

● CVE-2020-10756

QEMU SLiRP Networking Out-Of-Bounds Read Information Disclosure Vulnerability

Libslirp Project Libslirp<4.3.1

Redhat Openstack=13

Redhat Enterprise Linux=7.0

Redhat Enterprise Linux=8.0

Canonical Ubuntu Linux=16.04

and 14 more

● CVE-2020-1983

A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.

redhat/qemu-kvm<10:1.5.3-175.el7_9.1

redhat/qemu-kvm-ma<10:2.12.0-48.el7_9.2

redhat/qemu-kvm-rhev<10:2.12.0-48.el7_9.2

Libslirp Project Libslirp<=4.2.0

Fedoraproject Fedora=31

Fedoraproject Fedora=32

and 22 more

● CVE-2020-8608

In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.

redhat/qemu-kvm<2:0.12.1.2-2.506.el6_10.7

redhat/qemu-kvm<10:1.5.3-173.el7_8.1

redhat/qemu-kvm-ma<10:2.12.0-44.el7_8.1

redhat/qemu-kvm<10:1.5.3-160.el7_6.7

redhat/qemu-kvm<10:1.5.3-167.el7_7.6

redhat/qemu-kvm-ma<10:2.12.0-33.el7_7.3

and 43 more

● CVE-2020-7211

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

debian/libslirp<=4.4.0-1+deb11u2<=4.7.0-1

Libslirp Project Libslirp=4.1.0

Microsoft Windows

QEMU qemu=4.2.0

● CVE-2020-7039

tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds ac...

redhat/qemu-kvm<2:0.12.1.2-2.506.el6_10.6

redhat/qemu-kvm<10:1.5.3-173.el7

redhat/qemu-kvm-ma<10:2.12.0-44.el7

redhat/qemu-kvm<10:1.5.3-167.el7_7.6

redhat/qemu-kvm-ma<10:2.12.0-33.el7_7.3

redhat/slirp4netns<0:0.3.0-8.el7_7

and 22 more

● CVE-2019-15890

A use-after-free issue was found in the SLiRP networking implementation of the QEMU emulator. It occurs in ip_reass() routine while reassembling incoming packets, if the first fragment is bigger than ...

redhat/qemu-kvm<2:0.12.1.2-2.506.el6_10.6

redhat/slirp4netns<0:0.3.0-8.el7_7

Libslirp Project Libslirp=4.0.0

QEMU qemu=4.1.0

ubuntu/qemu<1:2.11+dfsg-1ubuntu7.20

ubuntu/qemu<1:3.1+dfsg-2ubuntu3.6

and 15 more

● CVE-2019-14378

A heap buffer overflow issue was found in the SLiRP networking implementation of the QEMU emulator. It occurs in ip_reass() routine while reassembling incoming packets, if the first fragment is bigger...

redhat/qemu-kvm<2:0.12.1.2-2.506.el6_10.6

redhat/qemu-kvm-ma<10:2.12.0-33.el7_7.1

redhat/qemu-kvm<10:1.5.3-167.el7_7.4

redhat/qemu-kvm-ma<10:2.12.0-18.el7_6.6

redhat/qemu-kvm<10:1.5.3-160.el7_6.6

redhat/slirp4netns<0:0.3.0-8.el7_7

and 21 more

Latest Libslirp project Vulnerabilities

Company

Resources

Contact