Описание
A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| qemu | fixed | 1:4.1-2 | package | |
| qemu-kvm | removed | package | ||
| libslirp | fixed | 4.2.0-2 | package | |
| slirp4netns | fixed | 1.0.1-1 | package | |
| slirp4netns | no-dsa | buster | package |
Примечания
https://gitlab.freedesktop.org/slirp/libslirp/-/commit/9bd6c5913271eabcb7768a58197ed3301fe19f2d
qemu 1:4.1-2 switched to system libslirp, marking that version as fixed
slirp4netns 1.0.1-1 switched to system libslirp, marking that version as fixed.
https://github.com/rootless-containers/slirp4netns/security/advisories/GHSA-p3hx-89v2-4r99
EPSS
Связанные уязвимости
A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.
A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.
A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.
EPSS