p PatchFirst

CVE-2019-14378

CVE-2019-14378

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.

CVSS 8.8 · High · EPSS 16.7% · Public exploit · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • qemu Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:4.1-1

    Update to 1:4.1-1

  • qemu Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:4.1-1

    Update to 1:4.1-1

  • qemu Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:4.1-1

    Update to 1:4.1-1

  • slirp4netns Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.3.2-1

    Update to 0.3.2-1

  • slirp4netns Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.3.2-1

    Update to 0.3.2-1

  • slirp4netns Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.3.2-1

    Update to 0.3.2-1

  • qemu Ubuntu:Pro:14.04:LTS

    Versions
    • 1.5.0+dfsg-3ubuntu5
    • 1.5.0+dfsg-3ubuntu6
    • 1.6.0+dfsg-2ubuntu1
    • 1.6.0+dfsg-2ubuntu2
    • 1.6.0+dfsg-2ubuntu3
    • 1.6.0+dfsg-2ubuntu4
    • 1.7.0+dfsg-2ubuntu1
    • 1.7.0+dfsg-2ubuntu2
    • 1.7.0+dfsg-2ubuntu3
    • 1.7.0+dfsg-2ubuntu4
    • 1.7.0+dfsg-2ubuntu5
    • 1.7.0+dfsg-2ubuntu7
    • 1.7.0+dfsg-2ubuntu8
    • 1.7.0+dfsg-2ubuntu9
    • 1.7.0+dfsg-3ubuntu1~ppa1
    • 1.7.0+dfsg-3ubuntu1
    • 1.7.0+dfsg-3ubuntu2
    • 1.7.0+dfsg-3ubuntu3
    • 1.7.0+dfsg-3ubuntu4
    • 1.7.0+dfsg-3ubuntu5
    • 1.7.0+dfsg-3ubuntu6
    • 1.7.0+dfsg-3ubuntu7
    • 2.0.0~rc1+dfsg-0ubuntu1
    • 2.0.0~rc1+dfsg-0ubuntu2
    • 2.0.0~rc1+dfsg-0ubuntu3
    • 2.0.0~rc1+dfsg-0ubuntu3.1
    • 2.0.0+dfsg-2ubuntu1
    • 2.0.0+dfsg-2ubuntu1.1
    • 2.0.0+dfsg-2ubuntu1.2
    • 2.0.0+dfsg-2ubuntu1.3
    • 2.0.0+dfsg-2ubuntu1.5
    • 2.0.0+dfsg-2ubuntu1.6
    • 2.0.0+dfsg-2ubuntu1.7
    • 2.0.0+dfsg-2ubuntu1.8
    • 2.0.0+dfsg-2ubuntu1.9
    • 2.0.0+dfsg-2ubuntu1.10
    • 2.0.0+dfsg-2ubuntu1.11
    • 2.0.0+dfsg-2ubuntu1.13
    • 2.0.0+dfsg-2ubuntu1.14
    • 2.0.0+dfsg-2ubuntu1.15
    • 2.0.0+dfsg-2ubuntu1.16
    • 2.0.0+dfsg-2ubuntu1.17
    • 2.0.0+dfsg-2ubuntu1.18
    • 2.0.0+dfsg-2ubuntu1.19
    • 2.0.0+dfsg-2ubuntu1.20
    • 2.0.0+dfsg-2ubuntu1.21
    • 2.0.0+dfsg-2ubuntu1.22
    • 2.0.0+dfsg-2ubuntu1.24
    • 2.0.0+dfsg-2ubuntu1.25
    • 2.0.0+dfsg-2ubuntu1.26
    • 2.0.0+dfsg-2ubuntu1.27
    • 2.0.0+dfsg-2ubuntu1.28
    • 2.0.0+dfsg-2ubuntu1.29
    • 2.0.0+dfsg-2ubuntu1.30
    • 2.0.0+dfsg-2ubuntu1.31
    • 2.0.0+dfsg-2ubuntu1.32
    • 2.0.0+dfsg-2ubuntu1.33
    • 2.0.0+dfsg-2ubuntu1.34
    • 2.0.0+dfsg-2ubuntu1.35
    • 2.0.0+dfsg-2ubuntu1.36
    • 2.0.0+dfsg-2ubuntu1.38
    • 2.0.0+dfsg-2ubuntu1.39
    • 2.0.0+dfsg-2ubuntu1.40
    • 2.0.0+dfsg-2ubuntu1.41
    • 2.0.0+dfsg-2ubuntu1.42
    • 2.0.0+dfsg-2ubuntu1.43
    • 2.0.0+dfsg-2ubuntu1.44
    • 2.0.0+dfsg-2ubuntu1.45
    • 2.0.0+dfsg-2ubuntu1.46
    Affected ranges
    • ECOSYSTEM: < 2.0.0+dfsg-2ubuntu1.47

    Update to 2.0.0+dfsg-2ubuntu1.47

  • slirp Ubuntu:Pro:14.04:LTS

    Versions
    • 1:1.0.17-7
    • 1:1.0.17-7+deb8u2build0.14.04.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qemu Ubuntu:16.04:LTS

    Versions
    • 1:2.3+dfsg-5ubuntu9
    • 1:2.3+dfsg-5ubuntu10
    • 1:2.4+dfsg-4ubuntu1
    • 1:2.4+dfsg-4ubuntu2
    • 1:2.4+dfsg-4ubuntu3
    • 1:2.4+dfsg-5ubuntu3
    • 1:2.5+dfsg-1ubuntu2
    • 1:2.5+dfsg-1ubuntu3
    • 1:2.5+dfsg-1ubuntu4
    • 1:2.5+dfsg-1ubuntu5
    • 1:2.5+dfsg-5ubuntu1
    • 1:2.5+dfsg-5ubuntu2
    • 1:2.5+dfsg-5ubuntu4
    • 1:2.5+dfsg-5ubuntu6
    • 1:2.5+dfsg-5ubuntu7
    • 1:2.5+dfsg-5ubuntu10
    • 1:2.5+dfsg-5ubuntu10.1
    • 1:2.5+dfsg-5ubuntu10.2
    • 1:2.5+dfsg-5ubuntu10.3
    • 1:2.5+dfsg-5ubuntu10.4
    • 1:2.5+dfsg-5ubuntu10.5
    • 1:2.5+dfsg-5ubuntu10.6
    • 1:2.5+dfsg-5ubuntu10.7
    • 1:2.5+dfsg-5ubuntu10.8
    • 1:2.5+dfsg-5ubuntu10.9
    • 1:2.5+dfsg-5ubuntu10.10
    • 1:2.5+dfsg-5ubuntu10.11
    • 1:2.5+dfsg-5ubuntu10.13
    • 1:2.5+dfsg-5ubuntu10.14
    • 1:2.5+dfsg-5ubuntu10.15
    • 1:2.5+dfsg-5ubuntu10.16
    • 1:2.5+dfsg-5ubuntu10.20
    • 1:2.5+dfsg-5ubuntu10.21
    • 1:2.5+dfsg-5ubuntu10.22
    • 1:2.5+dfsg-5ubuntu10.24
    • 1:2.5+dfsg-5ubuntu10.25
    • 1:2.5+dfsg-5ubuntu10.26
    • 1:2.5+dfsg-5ubuntu10.28
    • 1:2.5+dfsg-5ubuntu10.29
    • 1:2.5+dfsg-5ubuntu10.30
    • 1:2.5+dfsg-5ubuntu10.31
    • 1:2.5+dfsg-5ubuntu10.32
    • 1:2.5+dfsg-5ubuntu10.33
    • 1:2.5+dfsg-5ubuntu10.34
    • 1:2.5+dfsg-5ubuntu10.35
    • 1:2.5+dfsg-5ubuntu10.36
    • 1:2.5+dfsg-5ubuntu10.37
    • 1:2.5+dfsg-5ubuntu10.38
    • 1:2.5+dfsg-5ubuntu10.39
    • 1:2.5+dfsg-5ubuntu10.40
    • 1:2.5+dfsg-5ubuntu10.41
    Affected ranges
    • ECOSYSTEM: < 1:2.5+dfsg-5ubuntu10.42

    Update to 1:2.5+dfsg-5ubuntu10.42

  • android Ubuntu:16.04:LTS

    Versions
    • 20150818-1500-0ubuntu2
    • 20150818-1500-0ubuntu3
    • 20160307-0742-0ubuntu3
    • 20160330-0939-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • basilisk2 Ubuntu:16.04:LTS

    Versions
    • 0.9.20120331-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • bochs Ubuntu:16.04:LTS

    Versions
    • 2.6-2build1
    • 2.6-5
    • 2.6-5build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • fs-uae Ubuntu:16.04:LTS

    Versions
    • 2.4.1+ds-3ubuntu1
    • 2.6.1+dfsg-2
    • 2.6.2+dfsg-2
    • 2.6.2+dfsg-3
    • 2.6.2+dfsg-3build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • slirp Ubuntu:16.04:LTS

    Versions
    • 1:1.0.17-8
    • 1:1.0.17-8ubuntu16.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vde2 Ubuntu:16.04:LTS

    Versions
    • 2.3.2+r586-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qemu Ubuntu:18.04:LTS

    Versions
    • 1:2.10+dfsg-0ubuntu3
    • 1:2.10+dfsg-0ubuntu4
    • 1:2.10+dfsg-0ubuntu5
    • 1:2.11+dfsg-1ubuntu1
    • 1:2.11+dfsg-1ubuntu2
    • 1:2.11+dfsg-1ubuntu4
    • 1:2.11+dfsg-1ubuntu5
    • 1:2.11+dfsg-1ubuntu6
    • 1:2.11+dfsg-1ubuntu7
    • 1:2.11+dfsg-1ubuntu7.1
    • 1:2.11+dfsg-1ubuntu7.2
    • 1:2.11+dfsg-1ubuntu7.3
    • 1:2.11+dfsg-1ubuntu7.4
    • 1:2.11+dfsg-1ubuntu7.5
    • 1:2.11+dfsg-1ubuntu7.6
    • 1:2.11+dfsg-1ubuntu7.7
    • 1:2.11+dfsg-1ubuntu7.8
    • 1:2.11+dfsg-1ubuntu7.9
    • 1:2.11+dfsg-1ubuntu7.10
    • 1:2.11+dfsg-1ubuntu7.12
    • 1:2.11+dfsg-1ubuntu7.13
    • 1:2.11+dfsg-1ubuntu7.14
    • 1:2.11+dfsg-1ubuntu7.15
    • 1:2.11+dfsg-1ubuntu7.17
    • 1:2.11+dfsg-1ubuntu7.18
    • 1:2.11+dfsg-1ubuntu7.19
    Affected ranges
    • ECOSYSTEM: < 1:2.11+dfsg-1ubuntu7.20

    Update to 1:2.11+dfsg-1ubuntu7.20

  • basilisk2 Ubuntu:18.04:LTS

    Versions
    • 0.9.20120331-4
    • 0.9.20120331-4.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • bochs Ubuntu:18.04:LTS

    Versions
    • 2.6-5build1
    • 2.6-5build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • fs-uae Ubuntu:18.04:LTS

    Versions
    • 2.8.3+dfsg-1
    • 2.8.4+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • slirp Ubuntu:18.04:LTS

    Versions
    • 1:1.0.17-8
    • 1:1.0.17-8build1
    • 1:1.0.17-8ubuntu18.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vde2 Ubuntu:18.04:LTS

    Versions
    • 2.3.2+r586-2.1
    • 2.3.2+r586-2.1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qemu Ubuntu:20.04:LTS

    Versions
    • 1:4.0+dfsg-0ubuntu9
    • 1:4.0+dfsg-0ubuntu10
    Affected ranges
    • ECOSYSTEM: < 1:4.2-1ubuntu1

    Update to 1:4.2-1ubuntu1

  • basilisk2 Ubuntu:20.04:LTS

    Versions
    • 0.9.20180101-1build2
    • 0.9.20180101-1build3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →