Alpaquita LinuxStreamSecurity Advisory
Search Cve

CVE-2019-14378

Published: July 29, 2019Last modified: November 8, 2023

Description

ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.

Severity score breakdown

ParameterValue
Base score8.8
Attack VectorNETWORK
Attack complexityLOW
Privileges requiredLOW
User interactionNONE
ScopeUNCHANGED
ConfidentialityHIGH
Integrity impactHIGH
Availability impactHIGH
VectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Status

ProductReleasePackageStatus
Alpaquita Linux23 LTSlibslirpNot affected (4.7.0-r0)
StreamlibslirpNot affected (4.7.0-r0)

References

ON THIS PAGE