PatchTheCVElibslirp vulnerabilities and fixes
Recent CVEs affecting libslirp, with upgrade or downgrade steps. 13 tracked.
libslirp has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2021-06-15. Highest priority: CVE-2020-1983 (score 62/100).
- CVE-2021-3595 LOW 3.8 UPGRADE MITIGATE An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU
- CVE-2021-3594 LOW 3.8 UPGRADE MITIGATE An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU
- CVE-2021-3593 LOW 3.8 UPGRADE MITIGATE An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU
- CVE-2021-3592 LOW 3.8 UPGRADE MITIGATE An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU
- CVE-2020-8608 MEDIUM 5.6 DOWNGRADE MITIGATE In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overf
- CVE-2020-7211 HIGH 7.5 DOWNGRADE DOWNGRADE tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.
- CVE-2020-7039 MEDIUM 5.6 DOWNGRADE DOWNGRADE tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC
- CVE-2020-29130 MEDIUM 4.3 UPGRADE MITIGATE slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header d
- CVE-2020-29129 MEDIUM 4.3 UPGRADE MITIGATE ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header da
- CVE-2020-1983 HIGH 7.5 UPGRADE MITIGATE A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted
- CVE-2020-10756 MEDIUM 6.5 UPGRADE DOWNGRADE An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator
- CVE-2019-15890 HIGH 7.5 DOWNGRADE DOWNGRADE libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.
- CVE-2019-14378 HIGH 8.8 DOWNGRADE ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishan
FAQ
How do I fix libslirp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libslirp being exploited right now?
None of the tracked libslirp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libslirp CVE should I patch first?
CVE-2020-1983 currently ranks highest (62/100): A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted.