Read the docs
TI-2019-10717 Aliases CVE-2019-14378GHSA-qvqc-h5c8-h785

ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large…

Priority MEDIUM 55CWE-755Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 23 fixed, 3 without a fix

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.

Summary

ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.

Why it matters now

EPSS 0.16658 97th percentileScored 2026-11-07
Fix Partial Red Hat: 14 advisoriesRed Hat: 23 fixed, 3 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:libslirp_project:libslirp:4.0.0:*:*:*:*:*:*:*4.0.0VulnerableLibslirp Project
  • cpe:2.3:a:libslirp_project:libslirp:4.0.0:*:*:*:*:*:*:* Versions 4.0.0 Vulnerable ·Libslirp Project

Remediation

Red Hat 14 advisories

  • RHSA-2020:2342 Released 2020-06-01 · Red Hat rating Important
    qemu-kvm-rhev bug fix update
    • RHV-M 4.2 qemu-img-rhev-10:2.12.0-18.el7_6.11, qemu-kvm-common-rhev-10:2.12.0-18.el7_6.11, qemu-kvm-rhev-10:2.12.0-18.el7_6.11 +1
  • RHSA-2020:2126 Released 2020-05-13 · Red Hat rating Important
    qemu-kvm security update
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) qemu-img-10:1.5.3-160.el7_6.6, qemu-kvm-10:1.5.3-160.el7_6.6, qemu-kvm-common-10:1.5.3-160.el7_6.6 +1
    • Red Hat Enterprise Linux Server EUS (v. 7.6) qemu-img-10:1.5.3-160.el7_6.6, qemu-kvm-10:1.5.3-160.el7_6.6, qemu-kvm-common-10:1.5.3-160.el7_6.6 +1
  • RHSA-2020:2065 Released 2020-05-11 · Red Hat rating Important
    qemu-kvm-ma security update
    • Red Hat Enterprise Linux Server EUS (v. 7.6) qemu-img-ma-10:2.12.0-18.el7_6.6, qemu-kvm-common-ma-10:2.12.0-18.el7_6.6, qemu-kvm-ma-10:2.12.0-18.el7_6.6 +1
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) qemu-img-ma-10:2.12.0-18.el7_6.6, qemu-kvm-common-ma-10:2.12.0-18.el7_6.6, qemu-kvm-ma-10:2.12.0-18.el7_6.6 +1
Show 11 more Red Hat advisories
  • RHSA-2020:1216 Released 2020-03-31 · Red Hat rating Important
    qemu-kvm-rhev security, bug fix, and enhancement update
    • RHV-M 4.3 qemu-img-rhev-10:2.12.0-44.el7, qemu-kvm-common-rhev-10:2.12.0-44.el7, qemu-kvm-rhev-10:2.12.0-44.el7 +1
    • Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts qemu-img-rhev-10:2.12.0-44.el7, qemu-kvm-common-rhev-10:2.12.0-44.el7, qemu-kvm-rhev-10:2.12.0-44.el7 +1
  • RHSA-2020:0889 Released 2020-03-17 · Red Hat rating Important
    slirp4netns security update
    • Red Hat Enterprise Linux 7 Extras slirp4netns-0.3.0-8.el7_7
  • RHSA-2020:0775 Released 2020-03-10 · Red Hat rating Important
    qemu-kvm security update
    • Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.6, qemu-img-2:0.12.1.2-2.506.el6_10.6, qemu-kvm-2:0.12.1.2-2.506.el6_10.6 +1
    • Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.6, qemu-img-2:0.12.1.2-2.506.el6_10.6, qemu-kvm-2:0.12.1.2-2.506.el6_10.6 +1
    • Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.6, qemu-img-2:0.12.1.2-2.506.el6_10.6, qemu-kvm-2:0.12.1.2-2.506.el6_10.6 +1
    • Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.6, qemu-img-2:0.12.1.2-2.506.el6_10.6, qemu-kvm-2:0.12.1.2-2.506.el6_10.6 +1
  • RHSA-2020:0366 Released 2020-02-04 · Red Hat rating Important
    qemu-kvm security, bug fix, and enhancement update
    • Red Hat Enterprise Linux Client (v. 7) qemu-img-10:1.5.3-167.el7_7.4, qemu-kvm-10:1.5.3-167.el7_7.4, qemu-kvm-common-10:1.5.3-167.el7_7.4 +1
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) qemu-img-10:1.5.3-167.el7_7.4, qemu-kvm-10:1.5.3-167.el7_7.4, qemu-kvm-common-10:1.5.3-167.el7_7.4 +1
    • Red Hat Enterprise Linux Server (v. 7) qemu-img-10:1.5.3-167.el7_7.4, qemu-kvm-10:1.5.3-167.el7_7.4, qemu-kvm-common-10:1.5.3-167.el7_7.4 +1
    • Red Hat Enterprise Linux Workstation (v. 7) qemu-img-10:1.5.3-167.el7_7.4, qemu-kvm-10:1.5.3-167.el7_7.4, qemu-kvm-common-10:1.5.3-167.el7_7.4 +1
  • RHSA-2019:4344 Released 2019-12-19 · Red Hat rating Important
    qemu-kvm-rhev security update
    • Red Hat OpenStack Platform 10.0 qemu-img-rhev-10:2.12.0-33.el7_7.4, qemu-kvm-common-rhev-10:2.12.0-33.el7_7.4, qemu-kvm-rhev-10:2.12.0-33.el7_7.4 +1
  • RHSA-2019:3968 Released 2019-11-26 · Red Hat rating Important
    qemu-kvm-ma security update
    • Red Hat Enterprise Linux Server (v. 7) qemu-img-ma-10:2.12.0-33.el7_7.1, qemu-kvm-common-ma-10:2.12.0-33.el7_7.1, qemu-kvm-ma-10:2.12.0-33.el7_7.1 +1
    • Red Hat Enterprise Linux Server Optional (v. 7) qemu-kvm-common-ma-10:2.12.0-33.el7_7.1, qemu-kvm-ma-10:2.12.0-33.el7_7.1, qemu-kvm-tools-ma-10:2.12.0-33.el7_7.1
  • RHSA-2019:3787 Released 2019-11-07 · Red Hat rating Important
    qemu-kvm-rhev security update
    • Red Hat OpenStack Platform 13.0 qemu-img-rhev-10:2.12.0-33.el7_7.4, qemu-kvm-common-rhev-10:2.12.0-33.el7_7.4, qemu-kvm-rhev-10:2.12.0-33.el7_7.4 +1
  • RHSA-2019:3742 Released 2019-11-06 · Red Hat rating Important
    qemu-kvm-rhev security update
    • Red Hat OpenStack Platform 14.0 qemu-img-rhev-10:2.12.0-33.el7_7.4, qemu-kvm-common-rhev-10:2.12.0-33.el7_7.4, qemu-kvm-rhev-10:2.12.0-33.el7_7.4 +1
  • RHSA-2019:3494 Released 2019-11-05 · Red Hat rating Important
    container-tools:1.0 security and bug fix update
    • Red Hat Enterprise Linux AppStream (v. 8) buildah-1.5-5.gite94b4f9.module+el8.1.0+4241+a7060183.aarch64::container-tools:1.0, buildah-1.5-5.gite94b4f9.module+el8.1.0+4241+a7060183.ppc64le::container-tools:1.0, buildah-1.5-5.gite94b4f9.module+el8.1.0+4241+a7060183.s390x::container-tools:1.0 +47
  • RHSA-2019:3403 Released 2019-11-05 · Red Hat rating Important
    container-tools:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) buildah-1.9.0-5.module+el8.1.0+4240+893c1ab8.aarch64::container-tools:rhel8, buildah-1.9.0-5.module+el8.1.0+4240+893c1ab8.ppc64le::container-tools:rhel8, buildah-1.9.0-5.module+el8.1.0+4240+893c1ab8.s390x::container-tools:rhel8 +47
  • RHSA-2019:3179 Released 2019-10-23 · Red Hat rating Important
    qemu-kvm-rhev security and bug fix update
    • RHV-M 4.3 qemu-img-rhev-10:2.12.0-33.el7_7.4, qemu-kvm-common-rhev-10:2.12.0-33.el7_7.4, qemu-kvm-rhev-10:2.12.0-33.el7_7.4 +1
    • Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts qemu-img-rhev-10:2.12.0-33.el7_7.4, qemu-kvm-common-rhev-10:2.12.0-33.el7_7.4, qemu-kvm-rhev-10:2.12.0-33.el7_7.4 +1

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 8 Advanced VirtualizationAffectedNo fix yet
Red Hat OpenStack Platform 9 (Mitaka)AffectedNo fix planned: Will not fix
Advanced Virtualization CodeReady Builder for RHEL 8.1.0Fixed—
Advanced Virtualization for RHEL 8.1.0Fixed—
RHV-M 4.2Fixed RHSA-2020:2342
RHV-M 4.3Fixed RHSA-2019:3179, RHSA-2020:1216
Red Hat CodeReady Linux Builder (v. 8)Fixed—
Red Hat Enterprise Linux 7 ExtrasFixed RHSA-2020:0889
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2019:3403, RHSA-2019:3494
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2020:0366
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2020:0366
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)Fixed RHSA-2020:2126
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2020:0775
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2020:0775
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2020:0775
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2019:3968, RHSA-2020:0366
Red Hat Enterprise Linux Server EUS (v. 7.6)Fixed RHSA-2020:2065, RHSA-2020:2126
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2019:3968
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2020:0775
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2020:0366
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)Fixed RHSA-2020:2065
Red Hat OpenStack Platform 10.0Fixed RHSA-2019:4344
Red Hat OpenStack Platform 13.0Fixed RHSA-2019:3787
Red Hat OpenStack Platform 14.0Fixed RHSA-2019:3742
Red Hat Virtualization 4 Management Agent for RHEL 7 HostsFixed RHSA-2019:3179, RHSA-2020:1216
Not affected: 2 products
  • Red Hat Enterprise Linux 5
  • Red Hat OpenShift Container Platform 4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-14378
  2. 2026-10-03 Alias added: GHSA-qvqc-h5c8-h785

References

Patch 1

Advisory 18

Other 8

  • TI-2020-05822 tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows. CVSS 3.1HIGH 7.5
  • TI-2019-11942 libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c. CVSS 3.1HIGH 7.5
  • TI-2020-01899 libslirp: use after free vulnerability cause a denial of service. CVSS 3.1HIGH 7.5
  • TI-2020-05679 tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as… CVSS 3.1MEDIUM 5.6
  • TI-2020-06904 In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values… CVSS 3.1MEDIUM 5.6
  • TI-2020-08653 Out-of-bounds read in Slirp CVSS 3.1MEDIUM 6.5
See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences