ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based...
High severity
Unreviewed
Published
May 24, 2022
to the GitHub Advisory Database
•
Updated Jan 28, 2023
Description
Published by the National Vulnerability Database
Jul 29, 2019
Published to the GitHub Advisory Database
May 24, 2022
Last updated
Jan 28, 2023
ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
References