CVE search results

1 – 2 of 2 results

Detailed view

Sort by:

CVE-2019-15890

Low priority

Some fixes available 17 of 155

libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.

20 affected packages

vde2, android, libslirp, virtualbox, basilisk2...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
vde2	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
android	Not in release	Not in release	Not in release	Not in release
libslirp	Not affected	Not affected	Not affected	Not in release
virtualbox	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
basilisk2	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
bochs	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
fs-uae	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ns3	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
qemu	Fixed	Fixed	Fixed	Fixed
qemu-kvm	Not in release	Not in release	Not in release	Not in release
qemu-kvm-spice	Not in release	Not in release	Not in release	Not in release
qemu-linaro	Not in release	Not in release	Not in release	Not in release
slirp	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
virtualbox-hwe	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
xen	Not affected	Not affected	Not affected	Not affected
redboot-imx	Not in release	Not in release	Not in release	Needs evaluation
slirp4netns	Not affected	Not affected	Not affected	Not in release
virtualbox-lts-vivid	Not in release	Not in release	Not in release	Not in release
virtualbox-lts-wily	Not in release	Not in release	Not in release	Not in release
virtualbox-lts-xenial	Not in release	Not in release	Not in release	Not in release

CVE-2019-14378

Low priority

Some fixes available 17 of 105

ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.

13 affected packages

fs-uae, libslirp, qemu, basilisk2, bochs...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
fs-uae	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libslirp	Not affected	Not affected	Not affected	Not in release
qemu	Fixed	Fixed	Fixed	Fixed
basilisk2	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
bochs	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
slirp	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
vde2	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
xen	Not affected	Not affected	Not affected	Not affected
android	Not in release	Not in release	Not in release	Not in release
qemu-kvm	Not in release	Not in release	Not in release	Not in release
qemu-kvm-spice	Not in release	Not in release	Not in release	Not in release
qemu-linaro	Not in release	Not in release	Not in release	Not in release
slirp4netns	Not affected	Not affected	Not affected	Not in release

Search CVE reports