Libslirp CVE-2019-15890

A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets t

ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a cas

slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even i

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows. Rated high severit

Out-of-bounds heap read and integer underflow in libslirp's TCP urgent data handler (sosendoob) exposes gigabytes of hos

An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. Rated medium

In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in lat

tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands i

ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. Rated low severity (CV

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. Rated low severity (CV

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. Rated low severity (CV