Skip to content
OpenAdvisories
High · 7.5 CVE-2020-1983 EUVD-2020-12773GHSA-m3gw-pxj4-v7p8

libslirp: use after free vulnerability cause a denial of service.

Published Apr 22, 2020 · Updated Sep 16, 2024 · Assigned by palo_alto

Description

A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.

Affected products

VendorProductAffectedFixed
slirp libslirp unspecified – ≤ 4.2.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 libslirp 4.2.0-2 —
Debian 14 qemu 1:4.1-2 —
Debian 14 slirp4netns 1.0.1-1 —
Debian 13 libslirp 4.2.0-2 —
Debian 13 qemu 1:4.1-2 —
Debian 13 slirp4netns 1.0.1-1 —
Debian 12 libslirp 4.2.0-2 —
Debian 12 qemu 1:4.1-2 —
Debian 12 slirp4netns 1.0.1-1 —
Debian 10 qemu 1:3.1+dfsg-8+deb10u5 DSA-4665-1
Debian 9 qemu 1:2.8+dfsg-6+deb9u10 DLA-2288-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Debian 8 qemu 1:2.1+dfsg-12+deb8u15 DLA-2262-1
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS qemu 1:8.2.2+ds-0ubuntu1.4 USN-7094-1
Ubuntu 22.04 LTS qemu 1:6.2+dfsg-2ubuntu6.24 USN-7094-1
Ubuntu 20.04 LTS libslirp 4.1.0-2ubuntu2 —
Ubuntu 20.04 LTS qemu 1:4.2-3ubuntu6.1 USN-7094-1, USN-4372-1
Ubuntu 20.04 LTS slirp4netns No fix yet —
Ubuntu 18.04 LTS qemu 1:2.11+dfsg-1ubuntu7.26 USN-4372-1
Ubuntu 16.04 LTS qemu 1:2.5+dfsg-5ubuntu10.44 USN-4372-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS qemu 1:2.11+dfsg-1ubuntu7.42+esm2 USN-7094-1
Ubuntu Pro 16.04 LTS qemu 1:2.5+dfsg-5ubuntu10.51+esm3 USN-7094-1
Ubuntu Pro 14.04 LTS qemu 2.0.0+dfsg-2ubuntu1.47+esm4 USN-7094-1
ReleasePackageFixed inAdvisory
RHEL 8 SLOF 20190703-1.gitba1ab360.module+el8.1.1+5309+6d656f05 RHSA-2020:4676, RHSA-2020:4290, RHBA-2020:3172
RHEL 8 buildah +1 1.14.9-1.module+el8.2.1+6689+748e6520 RHSA-2020:3053
RHEL 8 cockpit-podman 17-1.module+el8.2.1+6636+bf4db4ab RHSA-2020:3053
RHEL 8 conmon 2:2.0.17-1.module+el8.2.1+6771+3533eb4c RHSA-2020:3053
RHEL 8 container-selinux 2:2.135.0-1.module+el8.2.1+6849+893e4f4a RHSA-2020:3053
RHEL 8 containernetworking-plugins 0.8.6-1.module+el8.2.1+6626+598993b4 RHSA-2020:3053
RHEL 8 crit +2 3.14-2.module+el8.2.1+6750+e53a300c RHSA-2020:3053
RHEL 8 fuse-overlayfs 1.0.0-2.module+el8.2.1+6465+1a51e8b6 RHSA-2020:3053
RHEL 8 hivex +6 1.3.15-7.module+el8.1.1+5309+6d656f05 RHSA-2020:4676, RHSA-2020:4290, RHBA-2020:3172
RHEL 8 libguestfs-winsupport 8.0-4.module+el8.1.1+5309+6d656f05 RHSA-2020:4676, RHSA-2020:4290, RHBA-2020:3172
RHEL 8 libiscsi +2 1.18.0-8.module+el8.1.0+4066+0f1aadab RHSA-2020:4676, RHSA-2020:4290, RHBA-2020:3172
RHEL 8 libnbd +4 1.0.3-1.module+el8.1.1+5659+15cacc69 RHSA-2020:4676, RHSA-2020:4290, RHBA-2020:3172
RHEL 8 libslirp +1 4.3.0-3.module+el8.2.1+6816+bedf4f91 RHSA-2020:3053
RHEL 8 libtpms +1 0.7.0-1.20191018gitdc116933b7.module+el8.1.1+5309+6d656f05 RHSA-2020:4290, RHBA-2020:3172
RHEL 8 libvirt +28 5.6.0-10.module+el8.1.1+5309+6d656f05 RHSA-2020:4676, RHSA-2020:4290, RHBA-2020:3172
RHEL 8 libvirt-dbus 1.3.0-2.module+el8.1.1+5309+6d656f05 RHSA-2020:4676, RHSA-2020:4290, RHBA-2020:3172
RHEL 8 libvirt-python +1 5.6.0-3.module+el8.1.1+5309+6d656f05 RHSA-2020:4676, RHSA-2020:4290, RHBA-2020:3172
RHEL 8 nbdfuse 1.2.2-1.module+el8.2.0+5644+32ac38d4 RHSA-2020:4676, RHBA-2020:3172
RHEL 8 nbdkit +13 1.12.5-2.module+el8.1.1+5309+6d656f05 RHSA-2020:4676, RHSA-2020:4290, RHBA-2020:3172
RHEL 8 netcf +2 0.2.8-12.module+el8.1.0+4066+0f1aadab RHSA-2020:4676, RHSA-2020:4290, RHBA-2020:3172
RHEL 8 perl-Sys-Virt 5.6.0-2.module+el8.1.1+5309+6d656f05 RHSA-2020:4676, RHSA-2020:4290, RHBA-2020:3172
RHEL 8 podman +3 1.9.3-2.module+el8.2.1+6867+366c07d6 RHSA-2020:3053
RHEL 8 python-podman-api 1.2.0-0.2.gitd0a45fe.module+el8.2.1+6465+1a51e8b6 RHSA-2020:3053
RHEL 8 python-pyvmomi +1 6.7.1-7.module+el8.1.1+5668+2d43f0bb RHSA-2020:4290, RHBA-2020:3172
RHEL 8 qemu-img +10 15:4.1.0-23.module+el8.1.1+8044+df42c295.4 RHSA-2020:4676, RHSA-2020:4290, RHBA-2020:3172
RHEL 8 runc 1.0.0-66.rc10.module+el8.2.1+6465+1a51e8b6 RHSA-2020:3053
RHEL 8 seabios +2 1.12.0-5.module+el8.1.1+5309+6d656f05 RHSA-2020:4676, RHSA-2020:4290, RHBA-2020:3172
RHEL 8 sgabios +1 1:0.20170427git-3.module+el8.1.0+4066+0f1aadab RHSA-2020:4676, RHSA-2020:4290, RHBA-2020:3172
RHEL 8 skopeo +2 1:1.0.0-1.module+el8.2.1+6676+604e1b26 RHSA-2020:3053
RHEL 8 slirp4netns 1.0.1-1.module+el8.2.1+6595+03641d72 RHSA-2020:3053
RHEL 8 supermin +1 5.1.19-10.module+el8.1.1+5309+6d656f05 RHSA-2020:4676, RHSA-2020:4290, RHBA-2020:3172
RHEL 8 swtpm +3 0.2.0-1.20191018git9227cf4.module+el8.1.1+5309+6d656f05 RHSA-2020:4290, RHBA-2020:3172
RHEL 8 toolbox 0.0.7-1.module+el8.2.1+6465+1a51e8b6 RHSA-2020:3053
RHEL 8 udica 0.2.1-2.module+el8.2.1+6465+1a51e8b6 RHSA-2020:3053
RHEL 8 virglrenderer +2 0.6.0-5.20180814git491d3b705.module+el8.1.1+5309+6d656f05 RHSA-2020:4290, RHBA-2020:3172
RHEL 8 virt-dib +26 1:1.40.2-16.module+el8.1.1+5309+6d656f05 RHSA-2020:4676, RHSA-2020:4290, RHBA-2020:3172
RHEL 7 qemu-img +3 10:1.5.3-175.el7_9.1 RHSA-2020:4079
RHEL 7 qemu-img-ma +7 10:2.12.0-48.el7_9.2 RHSA-2021:0459, RHSA-2021:0346
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhev Manager 4 qemu-img-rhev +3 10:2.12.0-48.el7_9.2 RHSA-2021:0459
Red Hat OpenStack 13 qemu-img-rhev +3 10:2.12.0-48.el7_9.2 RHSA-2021:0934

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 hivex +6 1.3.18-20.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 libguestfs-winsupport 8.2-1.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 libiscsi +2 1.18.0-8.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 libnbd +5 1.2.2-1.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 libvirt +24 6.0.0-28.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 libvirt-dbus 1.3.0-2.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 nbdkit +13 1.16.2-4.module_el8.5.0+2608+72063365 ALSA-2020:4676
AlmaLinux 8 netcf +2 0.2.8-12.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 ocaml-libguestfs +1 1:1.40.2-25.module_el8.3.0+2048+e7a0a3ea.alma ALSA-2020:4676
AlmaLinux 8 perl-Sys-Virt +1 6.0.0-1.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 python-podman-api 1.2.0-0.2.gitd0a45fe.module_el8.5.0+108+00865455 ALSA-2020:3053
AlmaLinux 8 runc 1.0.0-66.rc10.module_el8.5.0+108+00865455 ALSA-2020:3053
AlmaLinux 8 seabios +2 1.13.0-2.module_el8.5.0+2608+72063365 ALSA-2020:4676
AlmaLinux 8 sgabios 1:0.20170427git-3.module_el8.3.0+2048+e7a0a3ea ALSA-2020:4676
AlmaLinux 8 sgabios-bin 1:0.20170427git-3.module_el8.5.0+2608+72063365 ALSA-2020:4676
AlmaLinux 8 supermin +1 5.1.19-10.module_el8.5.0+2608+72063365 ALSA-2020:4676
AlmaLinux 8 toolbox 0.0.7-1.module_el8.5.0+108+00865455 ALSA-2020:3053
AlmaLinux 8 udica 0.2.1-2.module_el8.5.0+108+00865455 ALSA-2020:3053

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 hivex 1.3.18-20.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 libguestfs-winsupport 8.2-1.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 libiscsi 1.18.0-8.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 libnbd 1.2.2-1.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 libvirt-dbus 1.3.0-2.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 nbdkit 1.16.2-4.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 netcf 0.2.8-12.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 perl-Sys-Virt +1 6.0.0-1.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 python-podman-api 1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2 RLSA-2020:3053
Rocky Linux 8 runc 1.0.0-66.rc10.module+el8.5.0+708+6758137d RLSA-2020:3053
Rocky Linux 8 seabios 1.13.0-2.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 sgabios 1:0.20170427git-3.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 supermin 5.1.19-10.module+el8.4.0+534+4680a14e RLSA-2020:4676
Rocky Linux 8 toolbox 0.0.7-1.module+el8.4.0+559+c02fa3b2 RLSA-2020:3053
Rocky Linux 8 udica 0.2.1-2.module+el8.4.0+559+c02fa3b2 RLSA-2020:3053
ReleasePackageFixed inAdvisory
SLES 15 SP1 qemu 3.1.1.1-9.21.4 SUSE-SU-2020:1502-1
SLES 15 SP1 slirp4netns 0.4.5-3.9.1 SUSE-SU-2020:1197-1
SLES 15 qemu 2.11.2-9.36.1 SUSE-SU-2020:1523-1
SLES 12 SP5 qemu 3.1.1.1-3.14.1 SUSE-SU-2020:1516-1
SLES 12 SP4 qemu 2.11.2-5.26.1 SUSE-SU-2020:1501-1
SLES 12 SP3 qemu 2.9.1-6.44.1 SUSE-SU-2020:1538-1
Show 16 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP2 qemu 2.6.2-41.59.1 SUSE-SU-2020:1526-1
SLES 12 SP1 qemu 2.3.1-33.29.1 SUSE-SU-2020:1514-1
SLES 11 SP4 kvm 1.4.2-60.31.1 SUSE-SU-2020:14396-1
SLES for SAP 15 qemu 2.11.2-9.36.1 SUSE-SU-2020:1523-1
SLES for SAP 12 SP5 qemu 3.1.1.1-3.14.1 SUSE-SU-2020:1516-1
SLES for SAP 12 SP4 qemu 2.11.2-5.26.1 SUSE-SU-2020:1501-1
SLES for SAP 12 SP3 qemu 2.9.1-6.44.1 SUSE-SU-2020:1538-1
SLES for SAP 12 SP2 qemu 2.6.2-41.59.1 SUSE-SU-2020:1526-1
SLES for SAP 12 SP1 qemu 2.3.1-33.29.1 SUSE-SU-2020:1514-1
SLE HPC 15 qemu 2.11.2-9.36.1 SUSE-SU-2020:1523-1
SUSE OpenStack Cloud Crowbar 8 qemu 2.9.1-6.44.1 SUSE-SU-2020:1538-1
SUSE OpenStack Cloud 8 qemu 2.9.1-6.44.1 SUSE-SU-2020:1538-1
SUSE OpenStack Cloud 7 qemu 2.6.2-41.59.1 SUSE-SU-2020:1526-1
SUSE Linux Enterprise Point of Sale 11 SP3 kvm 1.4.2-53.38.1 SUSE-SU-2021:14706-1
SUSE HPE Helion OpenStack 8 qemu 2.9.1-6.44.1 SUSE-SU-2020:1538-1
SUSE Enterprise Storage 5 qemu 2.9.1-6.44.1 SUSE-SU-2020:1538-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed libslirp 4.6.1+7-1.2 openSUSE-SU-2024:10991-1
openSUSE Tumbleweed qemu 6.1.0-32.1 openSUSE-SU-2024:11287-1
openSUSE Leap 15.1 qemu +1 3.1.1.1-lp151.7.15.2 openSUSE-SU-2020:0756-1
openSUSE Leap 15.1 slirp4netns 0.4.5-lp151.2.9.1 openSUSE-SU-2020:0636-1
ReleasePackageFixed inAdvisory
Alpine v3.24 libslirp 4.3.0-r0 —
Alpine v3.23 libslirp 4.3.0-r0 —
Alpine v3.22 libslirp 4.3.0-r0 —
Alpine v3.21 libslirp 4.3.0-r0 —
Alpine v3.20 libslirp 4.3.0-r0 —
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 libslirp 4.3.0-r0 —
Alpine v3.18 libslirp 4.3.0-r0 —
Alpine v3.17 libslirp 4.3.0-r0 —
Alpine v3.16 libslirp 4.3.0-r0 —
Alpine v3.15 libslirp 4.3.0-r0 —
Alpine v3.14 libslirp 4.3.0-r0 —
Alpine v3.13 libslirp 4.3.0-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 qemu +26 10:3.1.0-8.amzn2.0.4 ALAS2-2020-1485

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 buildah +1 1.14.9-1.0.1.module+el8.2.1+7658+86e51d52 ELSA-2020-3053
Oracle Linux 8 cockpit-podman 17-1.module+el8.2.1+7658+86e51d52 ELSA-2020-3053
Oracle Linux 8 conmon 2:2.0.17-1.0.1.module+el8.2.1+7658+86e51d52 ELSA-2020-3053
Oracle Linux 8 container-selinux 2:2.135.0-1.module+el8.2.1+7658+86e51d52 ELSA-2020-3053
Oracle Linux 8 containernetworking-plugins 0.8.6-1.module+el8.2.1+7658+86e51d52 ELSA-2020-3053
Oracle Linux 8 crit +2 3.14-2.module+el8.2.1+7658+86e51d52 ELSA-2020-3053
Oracle Linux 8 fuse-overlayfs 1.0.0-2.module+el8.2.1+7658+86e51d52 ELSA-2020-3053
Oracle Linux 8 hivex +6 1.3.18-20.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 libguestfs-winsupport 8.2-1.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 libiscsi +2 1.18.0-8.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 libnbd +5 1.2.2-1.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 libslirp +1 4.3.0-3.module+el8.2.1+7658+86e51d52 ELSA-2020-3053
Oracle Linux 8 libvirt +28 6.0.0-28.0.1.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 libvirt-dbus 1.3.0-2.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 nbdkit +13 1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 netcf +2 0.2.8-12.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 perl-Sys-Virt +1 6.0.0-1.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 podman +3 1.9.3-2.0.1.module+el8.2.1+7658+86e51d52 ELSA-2020-3053
Oracle Linux 8 python-podman-api 1.2.0-0.2.gitd0a45fe.module+el8.2.1+7658+86e51d52 ELSA-2020-3053
Oracle Linux 8 qemu-img +10 15:4.2.0-34.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 runc 1.0.0-66.rc10.module+el8.2.1+7658+86e51d52 ELSA-2020-3053
Oracle Linux 8 seabios +2 1.13.0-2.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 sgabios +1 1:0.20170427git-3.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 skopeo +2 1:1.0.0-1.0.1.module+el8.2.1+7658+86e51d52 ELSA-2020-3053
Oracle Linux 8 slirp4netns 1.0.1-1.module+el8.2.1+7658+86e51d52 ELSA-2020-3053
Oracle Linux 8 supermin +1 5.1.19-10.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 8 udica 0.2.1-2.module+el8.2.1+7658+86e51d52 ELSA-2020-3053
Oracle Linux 8 virt-dib +25 1:1.40.2-25.0.1.module+el8.3.0+7860+a7792d29 ELSA-2020-4676
Oracle Linux 7 qemu-img +3 10:1.5.3-175.el7_9.1 ELSA-2020-4079

Advisories 37

References