Vendors / Libslirp Project Records 13 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 4
Exploited now Libslirp Project records in CISA KEV No Libslirp Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 55
ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.16658 · Published 2019-07-29 · Partial fix CWE-755
Priority MEDIUM 40
tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.04193 · Published 2020-01-21 · Fixed CWE-22
Priority MEDIUM 40
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.03994 · Published 2019-09-06 · Partial fix CWE-416
Priority LOW 37
A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02357 · Published 2020-04-22 · Partial fix CWE-416
Priority LOW 31
tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC.
CVSS 3.1 MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.03566 · Published 2020-01-16 · Partial fix CWE-787
Priority LOW 30
In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.
CVSS 3.1 MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.02486 · Published 2020-02-06 · Partial fix CWE-120
Priority LOW 29
An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator.
CVSS 3.1 MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.0051 · Published 2020-07-09 · Partial fix · 4.3.1 CWE-125
Priority LOW 24
slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01888 · Published 2020-11-26 · Partial fix CWE-125
Priority LOW 23
ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0146 · Published 2020-11-26 · Partial fix CWE-125
Priority LOW 18
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU.
CVSS 3.1 LOW 3.8· Local · Low privileges · No interaction · EPSS 0.00326 · Published 2021-06-15 · Partial fix CWE-824
Priority LOW 18
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU.
CVSS 3.1 LOW 3.8· Local · Low privileges · No interaction · EPSS 0.00326 · Published 2021-06-15 · Partial fix CWE-824
Priority LOW 18
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU.
CVSS 3.1 LOW 3.8· Local · Low privileges · No interaction · EPSS 0.00326 · Published 2021-06-15 · Partial fix CWE-824
Priority LOW 18
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU.
CVSS 3.1 LOW 3.8· Local · Low privileges · No interaction · EPSS 0.00326 · Published 2021-06-15 · Partial fix CWE-824
Open these records in search → All records by CVSS severity
0 4 5 4 0
THREATIST.IORead the docs