Login Request a demo
LI
Product
Libslirp
by Libslirp Project · last CVE Jun 15, 2021
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 0High 3Medium 6Low 4
Severity
All severities13Critical0High3Medium6Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Libslirp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-14378
8.8
17%
Jul 29
ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment
Affected: 4.0.0
CVE-2020-7211
7.5
4%
Jan 21
tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows
Affected: 4.1.0
CVE-2019-15890
7.5
4%
Sep 6
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c
Affected: 4.0.0
CVE-2020-10756
6.5
1%
Jul 9
An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator
Affected: before 4.3.1
CVE-2020-1983
6.5
2%
Apr 22
A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service
Affected: through 4.2.0
CVE-2020-8608
5.6
2%
Feb 6
In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code
Affected: 4.1.0
CVE-2020-7039
5.6
4%
Jan 16
tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC
Affected: 4.1.0
CVE-2020-29130
4.3
2%
Nov 26
slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length
Affected: through 4.3.1
CVE-2020-29129
4.3
1%
Nov 26
ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length
Affected: through 4.3.1
CVE-2021-3595
3.8
0%
Jun 15
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU
Affected: before 4.6.0
CVE-2021-3594
3.8
0%
Jun 15
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU
Affected: before 4.6.0
CVE-2021-3593
3.8
0%
Jun 15
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU
Affected: before 4.6.0
CVE-2021-3592
3.8
0%
Jun 15
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU
Affected: before 4.6.0
Showing 13