471 matches found
CVE-2020-7039
tcpemu in tcpsubr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMUIRC. This can cause a heap-based buffer overflow or other out-of-bounds access which can lead to a DoS or potential execute arbitrary code...
CVE-2020-7039
CVE-2020-7039 affects SLiRP’s tcp_emu in libslirp (used by QEMU 4.2.0); memory mismanagement can cause a heap-based buffer overflow leading to DoS or potential arbitrary code execution. Public advisories confirm fixes are shipped in updated qemu-kvm/qemu releases (e.g., Debian: 1:1.0.17-8+deb9u1;...
CVE-2020-7039: Out-of-bounds Write
tcpemu in tcpsubr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMUIRC. This can cause a heap-based buffer overflow or other out-of-bounds access which can lead to a DoS or potential execute arbitrary code...
PT-2020-2007 · Qemu +9 · Qemu +9
Name of the Vulnerable Software and Affected Versions: QEMU versions 4.2.0 libslirp version 4.1.0 Description: The issue is related to a memory management error in the tcp emu function of the QEMU software, which can be exploited by a remote attacker to access confidential data, compromise data...
The vulnerability of the ip_reass function in the ip_input.c file of the TCP-IP emulator library Libslirp allows a perpetrator to gain unauthorized access to information, cause service failures, or affect the accessibility of information.
The vulnerability of the ipreass function in the ipinput.c file of the Libslirp TCP-IP emulator’s library is related to the execution of operations within acceptable data buffer limits. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information, cause service...
Debian DLA-1927-1 : qemu security update
Several vulnerabilities were found in QEMU, a fast processor emulator notably used in KVM and Xen HVM virtualization. CVE-2016-5126 Heap-based buffer overflow in the iscsiaioioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service QEMU process crash or...
Debian: Security Advisory (DLA-1927-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-15890
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c...
CVE-2019-15890
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c...
DEBIAN-CVE-2019-15890
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c...
UBUNTU-CVE-2019-15890
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c...
CVE-2019-15890
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c...
CVE-2019-15890
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c...
CVE-2019-15890
CVE-2019-15890 affects libslirp 4.0.0 (used in QEMU 4.1.0). A use-after-free in ip_reass() within ip_input.c can crash the process, leading to a potential denial of service. The vulnerability is exploitable over the network, with no authentication or user interaction required per the CVSS: AV:N/A...
CVE-2019-15890
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c...
CVE-2019-15890: Use After Free
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c...
PT-2019-5138
Name of the Vulnerable Software and Affected Versions QEMU version 4.1.0 libslirp version 4.0.0 Description The issue is related to a use-after-free in the ip reass function in ip input.c, which can lead to a denial of service. This can be exploited by a remote attacker. Recommendations For QEMU...
Fedora Update for libslirp FEDORA-2019-77bafc4454
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 30 : libslirp (2019-77bafc4454)
Security fix for CVE-2019-14378 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...
