Skip to content
OpenAdvisories
Unscored CVE-2019-15890 EUVD-2019-6801GHSA-2237-w692-94pv

libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.

Published Sep 6, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 qemu 1:4.1-2 —
Debian 14 slirp4netns 0.4.1-1 —
Debian 13 qemu 1:4.1-2 —
Debian 13 slirp4netns 0.4.1-1 —
Debian 12 qemu 1:4.1-2 —
Debian 12 slirp4netns 0.4.1-1 —
Debian 10 qemu 1:3.1+dfsg-8+deb10u4 DSA-4616-1
Debian 9 qemu 1:2.8+dfsg-6+deb9u9 DSA-4616-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Debian 8 qemu 1:2.1+dfsg-12+deb8u12 DLA-1927-1
ReleasePackageFixed inAdvisory
Ubuntu 26.10 ns3 +6 No fix yet —
Ubuntu 26.04 LTS ns3 +6 No fix yet —
Ubuntu 25.10 ns3 +6 No fix yet —
Ubuntu 24.04 LTS ns3 +7 No fix yet —
Ubuntu 22.04 LTS ns3 +7 No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS ns3 +7 No fix yet —
Ubuntu 20.04 LTS qemu 1:4.2-1ubuntu1 —
Ubuntu 18.04 LTS ns3 +8 No fix yet —
Ubuntu 18.04 LTS qemu 1:2.11+dfsg-1ubuntu7.20 USN-4191-1
Ubuntu 16.04 LTS ns3 +9 No fix yet —
Ubuntu 16.04 LTS qemu 1:2.5+dfsg-5ubuntu10.42 USN-4191-1
Ubuntu Pro 14.04 LTS qemu 2.0.0+dfsg-2ubuntu1.47 USN-4191-2
Ubuntu Pro 14.04 LTS slirp No fix yet —
ReleasePackageFixed inAdvisory
RHEL 8 SLOF 20191022-3.git899d9883.module+el8.2.0+5449+efc036dd RHSA-2020:4676, RHBA-2020:3172
RHEL 8 buildah +1 1.11.6-4.module+el8.1.1+5259+bcdd613a RHSA-2020:0348
RHEL 8 cockpit-podman 11-1.module+el8.1.1+5259+bcdd613a RHSA-2020:0348
RHEL 8 conmon 2:2.0.6-1.module+el8.1.1+5259+bcdd613a RHSA-2020:0348
RHEL 8 container-selinux 2:2.124.0-1.module+el8.1.1+5259+bcdd613a RHSA-2020:0348
RHEL 8 containernetworking-plugins 0.8.3-4.module+el8.1.1+5259+bcdd613a RHSA-2020:0348
RHEL 8 fuse-overlayfs 0.7.2-1.module+el8.1.1+5259+bcdd613a RHSA-2020:0348
RHEL 8 hivex +6 1.3.18-20.module+el8.2.0+5588+63a201c3 RHSA-2020:4676, RHBA-2020:3172
RHEL 8 libguestfs-winsupport 8.2-1.module+el8.2.0+5590+82cd80df RHSA-2020:4676, RHBA-2020:3172
RHEL 8 libiscsi +2 1.18.0-8.module+el8.1.0+4066+0f1aadab RHSA-2020:4676, RHBA-2020:3172
RHEL 8 libnbd +5 1.2.2-1.module+el8.2.0+5644+32ac38d4 RHSA-2020:4676, RHBA-2020:3172
RHEL 8 libtpms +1 0.7.0-1.20191018gitdc116933b7.module+el8.2.0+4793+b09dd2fb RHBA-2020:3172
RHEL 8 libvirt +28 6.0.0-25.module+el8.2.1+7154+47ffd890 RHSA-2020:4676, RHBA-2020:3172
RHEL 8 libvirt-dbus 1.3.0-2.module+el8.2.0+4793+b09dd2fb RHSA-2020:4676, RHBA-2020:3172
RHEL 8 libvirt-python +1 6.0.0-1.module+el8.2.0+5453+31b2b136 RHSA-2020:4676, RHBA-2020:3172
RHEL 8 nbdkit +13 1.16.2-4.module+el8.2.1+6710+effcb1df RHSA-2020:4676, RHBA-2020:3172
RHEL 8 netcf +2 0.2.8-12.module+el8.1.0+4066+0f1aadab RHSA-2020:4676, RHBA-2020:3172
RHEL 8 perl-Sys-Virt 6.0.0-1.module+el8.2.0+5488+267def79 RHSA-2020:4676, RHBA-2020:3172
RHEL 8 podman +4 1.6.4-2.module+el8.1.1+5363+bf8ff1af RHSA-2020:0348
RHEL 8 python-podman-api 1.2.0-0.2.gitd0a45fe.module+el8.1.1+5259+bcdd613a RHSA-2020:0348
RHEL 8 python-pyvmomi +1 6.7.1-7.module+el8.2.0+4793+b09dd2fb RHBA-2020:3172
RHEL 8 qemu-img +10 15:4.2.0-29.module+el8.2.1+7297+a825794d RHSA-2020:4676, RHBA-2020:3172
RHEL 8 runc 1.0.0-64.rc9.module+el8.1.1+5259+bcdd613a RHSA-2020:0348
RHEL 8 seabios +2 1.13.0-2.module+el8.2.1+7284+aa32a2c4 RHSA-2020:4676, RHBA-2020:3172
RHEL 8 sgabios +1 1:0.20170427git-3.module+el8.1.0+4066+0f1aadab RHSA-2020:4676, RHBA-2020:3172
RHEL 8 skopeo +2 1:0.1.40-8.module+el8.1.1+5351+506397b0 RHSA-2020:0348
RHEL 8 slirp4netns 0.4.2-2.git21fdece.module+el8.1.1+5460+3ac089c3 RHSA-2020:0348
RHEL 8 supermin +1 5.1.19-10.module+el8.2.0+4793+b09dd2fb RHSA-2020:4676, RHBA-2020:3172
RHEL 8 swtpm +3 0.2.0-2.20200127gitff5a83b.module+el8.2.0+5579+d71178e0 RHBA-2020:3172
RHEL 8 toolbox 0.0.4-1.module+el8.1.1+4407+ac444e5d RHSA-2020:0348
RHEL 8 udica 0.2.1-2.module+el8.1.1+4975+482d6f5d RHSA-2020:0348
RHEL 8 virglrenderer +2 0.8.2-1.module+el8.2.0+5777+d9c2af8c RHBA-2020:3172
RHEL 8 virt-dib +25 1:1.40.2-24.module+el8.2.1+7154+47ffd890 RHSA-2020:4676, RHBA-2020:3172
RHEL 6 qemu-img +3 2:0.12.1.2-2.506.el6_10.6 RHSA-2020:0775
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Extras Other 7 slirp4netns 0.3.0-8.el7_7 RHSA-2020:0889

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 cockpit-podman 11-1.module_el8.5.0+108+00865455 ALSA-2020:0348
AlmaLinux 8 containernetworking-plugins 0.8.3-4.module_el8.5.0+108+00865455 ALSA-2020:0348
AlmaLinux 8 hivex +6 1.3.18-20.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 libguestfs-winsupport 8.2-1.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 libiscsi +2 1.18.0-8.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 libnbd +5 1.2.2-1.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 libvirt +24 6.0.0-28.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 libvirt-dbus 1.3.0-2.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 nbdkit +13 1.16.2-4.module_el8.5.0+2608+72063365 ALSA-2020:4676
AlmaLinux 8 netcf +2 0.2.8-12.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 ocaml-libguestfs +1 1:1.40.2-25.module_el8.3.0+2048+e7a0a3ea.alma ALSA-2020:4676
AlmaLinux 8 perl-Sys-Virt +1 6.0.0-1.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 python-podman-api 1.2.0-0.2.gitd0a45fe.module_el8.5.0+108+00865455 ALSA-2020:0348
AlmaLinux 8 seabios +2 1.13.0-2.module_el8.5.0+2608+72063365 ALSA-2020:4676
AlmaLinux 8 sgabios 1:0.20170427git-3.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 sgabios-bin 1:0.20170427git-3.module_el8.5.0+2608+72063365 ALSA-2020:4676
AlmaLinux 8 supermin +1 5.1.19-10.module_el8.5.0+2608+72063365 ALSA-2020:4676
AlmaLinux 8 udica 0.2.1-2.module_el8.5.0+108+00865455 ALSA-2020:0348

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 cockpit-podman 11-1.module+el8.4.0+559+c02fa3b2 RLSA-2020:0348
Rocky Linux 8 container-selinux 2:2.124.0-1.gitf958d0c.module+el8.5.0+681+c9a1951f RLSA-2020:0348
Rocky Linux 8 containernetworking-plugins 0.8.3-4.module+el8.4.0+559+c02fa3b2 RLSA-2020:0348
Rocky Linux 8 hivex 1.3.18-20.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 libguestfs-winsupport 8.2-1.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 libiscsi 1.18.0-8.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 libnbd 1.2.2-1.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 libvirt-dbus 1.3.0-2.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 nbdkit 1.16.2-4.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 netcf 0.2.8-12.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 perl-Sys-Virt +1 6.0.0-1.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 podman 1.6.4-28.module+el8.5.0+770+e2f49861 RLSA-2020:0348
Rocky Linux 8 python-podman-api 1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2 RLSA-2020:0348
Rocky Linux 8 seabios 1.13.0-2.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 sgabios 1:0.20170427git-3.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 supermin 5.1.19-10.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 udica 0.2.1-2.module+el8.4.0+559+c02fa3b2 RLSA-2020:0348
ReleasePackageFixed inAdvisory
SLES 15 SP3 qemu 5.2.0-17.1 SUSE-SU-2021:1942-1
SLES 15 SP2 qemu 3.1.1.1-9.27.2 SUSE-SU-2021:1918-1, SUSE-SU-2021:1893-1
SLES 15 SP1 qemu 3.1.1.1-9.6.2 SUSE-SU-2021:1918-1, SUSE-SU-2019:2955-1
SLES 15 qemu 2.11.2-9.46.1 SUSE-SU-2021:1895-1
SLES 12 SP5 qemu 3.1.1.1-51.1 SUSE-SU-2021:1837-1
Show 28 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP4 qemu 2.11.2-5.32.1 SUSE-SU-2021:1947-1
SLES 12 SP4 xen 4.11.2_02-2.14.2 SUSE-SU-2019:2753-1
SLES 12 SP3 qemu 2.9.1-6.44.1 SUSE-SU-2021:1894-1, SUSE-SU-2020:1538-1
SLES 12 SP3 xen 4.9.4_04-3.56.2 SUSE-SU-2019:2769-1
SLES 12 SP2 qemu 2.6.2-41.59.1 SUSE-SU-2021:1829-1, SUSE-SU-2020:1526-1
SLES 12 SP2 xen 4.7.6_06-43.54.2 SUSE-SU-2019:2783-1
SLES 12 SP1 qemu 2.3.1-33.29.1 SUSE-SU-2020:1514-1
SLES 12 SP1 xen 4.5.5_28-22.64.1 SUSE-SU-2020:0388-1
SLES 11 SP4 kvm 1.4.2-60.31.1 SUSE-SU-2020:14396-1
SLES 11 SP4 xen 4.4.4_40-61.49.1 SUSE-SU-2019:14199-1
SLES for SAP 15 SP1 qemu 3.1.1.1-9.27.2 SUSE-SU-2021:1918-1
SLES for SAP 15 qemu 2.11.2-9.46.1 SUSE-SU-2021:1895-1
SLES for SAP 12 SP5 qemu 3.1.1.1-51.1 SUSE-SU-2021:1837-1
SLES for SAP 12 SP4 qemu 2.11.2-5.32.1 SUSE-SU-2021:1947-1
SLES for SAP 12 SP4 xen 4.11.2_02-2.14.2 SUSE-SU-2019:2753-1
SLES for SAP 12 SP3 qemu 2.9.1-6.44.1 SUSE-SU-2021:1894-1, SUSE-SU-2020:1538-1
SLES for SAP 12 SP3 xen 4.9.4_04-3.56.2 SUSE-SU-2019:2769-1
SLES for SAP 12 SP2 qemu 2.6.2-41.59.1 SUSE-SU-2020:1526-1
SLES for SAP 12 SP2 xen 4.7.6_06-43.54.2 SUSE-SU-2019:2783-1
SLES for SAP 12 SP1 qemu 2.3.1-33.29.1 SUSE-SU-2020:1514-1
SLES for SAP 12 SP1 xen 4.5.5_28-22.64.1 SUSE-SU-2020:0388-1
SLE Micro 5.0 qemu 4.2.1-11.19.2 SUSE-SU-2021:1893-1
SLE HPC 15 SP1 qemu 3.1.1.1-9.27.2 SUSE-SU-2021:1918-1
SLE HPC 15 qemu 2.11.2-9.46.1 SUSE-SU-2021:1895-1
SUSE OpenStack Cloud Crowbar 9 qemu 2.11.2-5.32.1 SUSE-SU-2021:1947-1
SUSE OpenStack Cloud Crowbar 8 qemu 2.9.1-6.44.1 SUSE-SU-2021:1894-1, SUSE-SU-2020:1538-1
SUSE OpenStack Cloud Crowbar 8 xen 4.9.4_04-3.56.2 SUSE-SU-2019:2769-1
SUSE OpenStack Cloud 9 qemu 2.11.2-5.32.1 SUSE-SU-2021:1947-1
SUSE OpenStack Cloud 8 qemu 2.9.1-6.44.1 SUSE-SU-2021:1894-1, SUSE-SU-2020:1538-1
SUSE OpenStack Cloud 8 xen 4.9.4_04-3.56.2 SUSE-SU-2019:2769-1
SUSE OpenStack Cloud 7 qemu 2.6.2-41.59.1 SUSE-SU-2020:1526-1
SUSE OpenStack Cloud 7 xen 4.7.6_06-43.54.2 SUSE-SU-2019:2783-1
SUSE Manager Server 4.0 qemu 3.1.1.1-9.27.2 SUSE-SU-2021:1918-1
SUSE Manager Retail Branch Server 4.0 qemu 3.1.1.1-9.27.2 SUSE-SU-2021:1918-1
SUSE Manager Proxy 4.0 qemu 3.1.1.1-9.27.2 SUSE-SU-2021:1918-1
SUSE Linux Enterprise Point of Sale 11 SP3 kvm 1.4.2-53.38.1 SUSE-SU-2021:14706-1
SUSE Linux Enterprise Point of Sale 11 SP3 xen 4.2.5_21-45.33.1 SUSE-SU-2019:14201-1
SUSE HPE Helion OpenStack 8 qemu 2.9.1-6.44.1 SUSE-SU-2021:1894-1, SUSE-SU-2020:1538-1
SUSE HPE Helion OpenStack 8 xen 4.9.4_04-3.56.2 SUSE-SU-2019:2769-1
SUSE Enterprise Storage 6 qemu 3.1.1.1-9.27.2 SUSE-SU-2021:1918-1
SUSE Enterprise Storage 5 qemu 2.9.1-6.44.1 SUSE-SU-2020:1538-1
SUSE Enterprise Storage 5 xen 4.9.4_04-3.56.2 SUSE-SU-2019:2769-1
SUSE Enterprise Storage 4 xen 4.7.6_06-43.54.2 SUSE-SU-2019:2783-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed qemu 6.1.0-32.1 openSUSE-SU-2024:11287-1
openSUSE Leap 15.3 qemu 5.2.0-17.1 openSUSE-SU-2021:1942-1
openSUSE Leap 15.2 qemu 4.2.1-lp152.9.16.2 openSUSE-SU-2021:1043-1
openSUSE Leap 15.2 qemu-linux-user 4.2.1-lp152.9.16.1 openSUSE-SU-2021:1043-1
openSUSE Leap 15.2 qemu-testsuite 4.2.1-lp152.9.16.7 openSUSE-SU-2021:1043-1
openSUSE Leap 15.1 qemu +1 3.1.1.1-lp151.7.6.1 openSUSE-SU-2019:2510-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 qemu +26 10:3.1.0-8.amzn2.0.6 ALAS2-2020-1570

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 hivex +6 1.3.18-20.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 libguestfs-winsupport 8.2-1.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 libiscsi +2 1.18.0-8.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 libnbd +5 1.2.2-1.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 libvirt +28 6.0.0-28.0.1.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 libvirt-dbus 1.3.0-2.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 nbdkit +13 1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 netcf +2 0.2.8-12.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 perl-Sys-Virt +1 6.0.0-1.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 qemu-img +10 15:4.2.0-34.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 seabios +2 1.13.0-2.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 sgabios +1 1:0.20170427git-3.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 supermin +1 5.1.19-10.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 virt-dib +25 1:1.40.2-25.0.1.module+el8.3.0+7860+a7792d29 ELSA-2020-4676

Advisories 39

References