LI
Product
Libslirp
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 6Low 4
Watch
Add Libslirp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10756 | 6.5 | Jul 9 | An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator Affected: before 4.3.1 |
| CVE-2020-1983 | 6.5 | Apr 22 | A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service Affected: through 4.2.0 |
| CVE-2020-8608 | 5.6 | Feb 6 | In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code Affected: 4.1.0 |
| CVE-2020-7039 | 5.6 | Jan 16 | tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC Affected: 4.1.0 |
| CVE-2020-29130 | 4.3 | Nov 26 | slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length Affected: through 4.3.1 |
| CVE-2020-29129 | 4.3 | Nov 26 | ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length Affected: through 4.3.1 |
Showing 6