55 matches found
DEBIAN-CVE-2019-15890
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c...
CVE-2019-15890
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c...
CVE-2019-15890
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c...
Design/Logic Flaw
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c...
UBUNTU-CVE-2019-15890
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c...
CVE-2019-15890
CVE-2019-15890 affects libslirp 4.0.0 (used in QEMU 4.1.0). A use-after-free in ip_reass() within ip_input.c can crash the process, leading to a potential denial of service. The vulnerability is exploitable over the network, with no authentication or user interaction required per the CVSS: AV:N/A...
CVE-2019-15890
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c...
CVE-2019-14378
ipreass in ipinput.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment...
DEBIAN-CVE-2019-14378
ipreass in ipinput.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment...
CVE-2019-14378
ipreass in ipinput.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment...
Heap overflow
ipreass in ipinput.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment...
CVE-2019-14378
ipreass in ipinput.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment...
CVE-2019-14378
CVE-2019-14378 is a heap-based buffer overflow in SLiRP (ip_reass in libslirp 4.0.0) used by QEMU’s networking, triggered by reassembling large first fragments. The issue can allow a QEMU process crash and, depending on context, may lead to code execution with the host/QEMU process privileges. Co...
CVE-2019-14378
ipreass in ipinput.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment...
CVE-2019-14378
ipreass in ipinput.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment...